|









Gord's
Discount Computer Bookstore & Software!!
Download Gord's
FREE Computer Maintenance Scheduler
Read Gord's new Guide for Safer Downloading of Music and Videos!

Check
out Gord's Fantastic In-Home Computer Tune-Up Special
Gord's FAST & FREE
Online Computer Tech Support Helpdesk - AskGordRoutley.com!
Rid Yourself Of Spammers NOW!!
| |
Start-Up Applications - All
Introduction
This page presents a comprehensive list of the programs you may
find that run when you switch on your PC as
typically identified by MSCONFIG or
the registry "Run" keys - and whether you need them.
- This information is provided courtesy of Paul Collins
http://www.pacs-portal.co.uk.
Presentation, format & comments Copyright © Paul Collins, 2001 - 2003 (thanks
Paul).
Portions Copyright © Peter Forrest, Denny Denham, Sylvain Prevost, Tony Klein.
Software support by John Mayer.
All rights reserved.
- This complete list is available for
download here - .zip file (also courtesy of Paul)
Close Program/Task Manager
This is NOT a list of tasks/processes taken from Task Manager
or the Close Program window (CTRL+ALT+DEL) but a list of startup
applications, although you will find some of them listed via this method.
Pressing CTRL+ALT+DEL identifies programs that are currently running - not
necessarily at start-up.
Operating System Differences
A number of entries are repeated due to the way that different operating
systems display start-up items. For example, WinMe lists "POPROXY.EXE" as "Norton
eMail Protect" whereas WinXP lists it as "Poproxy"
Random startup entry/filename viruses
There are viruses and other pests that can add any number of different
entries to the startups. They make additional entries under the registry key
HKLM\Software\Microsoft\Windows\CurrentVersion\ Run and RunOnce keys, allowing
them to run at startup:
(1)
PE_BISTRO - adds XXXX = "C:\WINDOWS\XXXX.EXE" - where XXXX is the randomly
chosen filename of the dropped file
(2)
MAGISTR.A - adds <Virus Name> = "<Path of Virus>\<Virus Name>.EXE"
(3)
BUGBEAR - adds <random string> = %system%\<random filename>.EXE. %system% is
a variable. The worm locates the System folder and copies itself to that
location. By default this is C:\Windows\System (Win9x/Me), C:\Winnt\System32
(WinNT/2K), or C:\Windows\System32 (WinXP)
(4)
OPTIXPRO.11 - adds <Registry entry> = "<Path of Virus>\<Filename>"
(5) Lop.com
homepage hijacker - creates multiple and random startup entries
Spyware/Adware/Malware/Foistware & Hijackers
Check SpywareInfo
for information about these types of program. They have a very active
forum
and a list of programs that may remove them
here
If you decide to disable a program and run it manually, and there isn't a
shortcut or Start -> Programs entry available you can
create your own shortcut.
Hit CTRL+refresh in your browser to make sure you get the latest version
Key:
-
"Y" - Normally leave to run at start-up
-
"N" - Not required - typically infrequently used tasks that
can be started manually if necessary
-
"U" - User's choice - depends whether a user deems it
necessary
-
"X" - Definitely not required - typically viruses, spyware,
adware and "resource hogs"
-
"?" - Unknown
                          

| |
Name/Startup Item |
Command |
Comments |
| X |
%123456% |
rundll32.exe shell32.dll, Control_RunDLL
...%123456%.cpl |
Added as a result of the
KITRO.C (or
DANDI.A) VIRUS! %123456% can be any random 4 to 6 digit number |
| ? |
%cmpmixtitle% |
%cmpmixstr% |
?? |
| U |
$EnterNet |
Enternet.exe |
Connection manager for the EnterNet ISP. You can also use
RASPPOE |
| N |
@Hoc Toolbar |
AtHoc.exe |
One-click activated browsing toolbar used by various
web-sites. See
here for more info |
| N |
@loha |
reminder.exe |
Registration reminder for
@loha@home E-mail utility |
| U |
!NoLoad |
winrecon.exe |
WinRecon
- surveillance software that creates records of everything people do on a
computer, ie, spying or monitoring depending upon how you call it |
| X |
_x-Finder |
_x-Finder.exe |
Disconnects and redials an ISP modem to an adult content
site |
| X |
(*)Run |
win32API.exe |
Homepage hijacker, see
here (* = any digit) |
| X |
(*)API Machine |
winSOCKS.exe |
Homepage hijacker, see
here (* = any digit) |
| U |
00THotkey |
00THotKey.exe |
For Toshiba Satellite notebook series to use the front
buttons, play, stop, next, prev. |
| N |
1: |
hpdrv.exe |
HP utility for monitoring when and how many recoveries have
been done |
| U |
12Ghosts
Popup-Killer |
12popup.exe |
12Ghosts
Popup-Killer |
| ? |
17779Proj2002 |
N/A |
?? |
| N |
1A:MacVisionTrayMonitor |
TrayMonitor.exe |
Comes with the MacVision program for monitoring tray icons
(Note : program is by Stardock) |
| N |
1A:Stardock
TrayMonitor |
TrayServer.exe |
For monitoring tray icons |
| U |
1Srv32 |
SpyAgent4.exe |
SpyTech
SpyAgent
monitoring software. "Spy software that allows you to monitor EVERYTHING
users do on your PC." |
| U |
2wSysTray |
2portalmon.exe |
2Wire
Homeportal user interface |
| Y |
3c1807pd |
3cmlink.exe 3cpipe-3c1807pd |
3Com WinModem driver. See
here for
more WinModem information |
| N |
3cdminic |
3CDMINIC.EXE |
3Com DMI (DynamicAccess Desktop Management
Interface) Agent associated with 3Com network cards |
| ? |
3CM Link |
3cmcnkw.exe |
Same as below? |
| Y |
3Cmlink |
3CmlinkW.exe |
For a US Robotics WinModem. Provides the link to Windows as
the CPU does the processing on WinModems - won't work without it. See
here for
more WinModem information |
| N |
3ComDMIAgent |
3CDMINIC.EXE |
3Com DMI (DynamicAccess Desktop Management
Interface) Agent associated with 3Com network cards |
| Y |
3cpipe-USRpdA |
USRmlnkA.exe |
Modem driver files from US Robotics |
| U |
3Deep Control
Panel |
3DeepCTL.EXE |
From
LightSurf
Technologies (nee E-Color) -
3Deep corrects
lighting, shading and color for all your 2D and 3D games |
| X |
3Dfx Acc |
GFXACC.EXE |
Added as a result of the
GIBE VIRUS! |
| Y |
3dfx Tools |
3dfxCmn.dll |
Updates the registry with information that can't be held
for Voodoo 3/4/5 series graphics cards. Important for owners of these cards |
| N |
3dfx Task
Manager |
3dfxMan.exe |
System Tray application for 3dfx Voodoo 3/4/5 functions.
Available via Start -> Programs |
| Y |
3dfxv2ps.dll |
3dfxv2ps.dll |
Updates the registry with info that can't be held for 3dfx
Voodoo 2 video cards. Important for owners of these cards |
| U |
3DLabsHelperDemon |
3dldemon.exe |
Directly from the programs author "It is a tiny program
that is installed by the Permedia2/3 and probably other Oxygen-series cards.
Normally it sits in the background doing nothing at all (sleeping on a
semaphore), so it should take zero CPU time and virtually zero memory, since
it will all be paged out to the hard drive." In most cases it can be safely
disabled |
| N |
3D Text |
3D Text.scr |
3D Text screensaver |
| U |
3qdctl.exe |
3qdctl.exe |
Provided with Terratec 128i PCI and similar sound cards.
Loads a sound profile at bootup, restoring volume and other audio settings
to a pre-determined default. Similar to Creative Lab's AudioHQ |
| X |
5-2-46-112 |
5-2-46-112.exe |
Adult content pop-up dialler. Removal instructions
here |

| |
Name/Startup Item |
Command |
Comments |
| U |
A1000
Settings Utility |
cpqa1000.exe |
Compaq A1000 Print Fax All-in-One copy scan printer
software. Required in the Startup in order to scan, print, copy and fax.
Only required if you use these features |
| ? |
AAAKeyboard |
?? |
?? |
| N |
AAATraySaver |
TraySaver.exe |
System Tray management utility from
Mike Lin which allows you
to hide, show, restore icons that are lost in an Explorer crash, remove dead
tray icons, minimize any window to the System Tray |
| N |
ABBYY
Community Agent |
CAGENT.EXE |
Installed with the Optical Character Recognition (OCR)
software that comes bundled with a Compaq A3000 all-in-one printer/scanner.
Its function appears to be to link you to the internet in an attempt to buy
the 5.0 version of the software |
| X |
ABC |
keylogger.exe |
Monitors keystrokes so you can check if someone has typed
anything while your away from your PC. Reported as spyware by
SpyCop in
their FAQ |
| X |
ABsr |
absr.exe |
Added as a result of the
AUTOUPDER VIRUS! |
| X |
abtu |
mp3serch.exe
lopsearch.exe |
Loads the executable for
Lop.com.
mp3serch.exe is the final version whilst lopsearch.exe is the beta version |
| Y |
AcBtnMgr_Xxx |
AcBtnMgr_Xxx.exe |
Associated with the Lexmark Xxx (where "xx" is the model)
all-in-one printer/scanner/copier. Required for correct operation |
| U |
Accelerate |
accelerate.exe |
Webroot
Accelerate - allows you to optimize Windows network registry settings in
order to boost surfing speeds. Leave this enabled if you find it improves
your connection |
| N |
Access Ramp
Monitor |
armon32.exe |
Monitors your progress on the internet; hang-ups,
connection speeds, internet congestion and traffic flow. It prevents some
games from running also. To disable the Access Ramp Monitor (1) Open Windows
Explorer (2) Open the Program Files folder (3) Open the MindSpring folder
(4) Open the AccessRamp folder (5) Double-click on the ARMCfg32.exe file (6)
Uncheck Enable Dialup Monitor and click OK (7) Restart the computer and try
again |
| N |
AccessRamp
Monitor01 |
ARMon32a.exe |
From a visitor "Just wanted to provide you with some info
on Access Ramp software installed with Verizon DSL accounts in those areas
that use the Winpoet PPPoE software. The Access Ramp TSRs are installed as
part of IP Insight software (can't remember the software maker). You can
decline to install IP Insight during Winpoet setup, or go into Add/Remove
programs uninstall IP Insight by hand if it's already installed. It really
doesn't do a darn thing for you. It was intended to help DSL techs monitor
QoS, but the backend part was never implemented (at least as of earlier this
year). This will not affect the user's ability or inability to access their
DSL service." |
| N |
AccessRampLAN01 |
ARUpld32.exe |
Version of the above for LAN connections - a history
uploader. The key in turning it off is a file named ARUCfg32.exe. This file
(ARUCfg32.exe) does not show up in the startup process. If you have this
file, you can execute it and remove all the monitoring activities it does.
Removing all the checks in all the boxes (both tabs) still calls
ARUpld32.exe to start when you start the dial up. You can block it from
sending info if you have Zone Alarm installed. Renaming the extension of
ARUCfg32.exe to ARUCfg32.exe1 works. The ARUpld32.exe is not loaded when
launching the dial up client. Written by IP Insight and also included with
Earthlink Total Access 2003 |
| N |
AccuWeather.com® Desktop |
?? |
Desktop weather from
AccuWeather.com |
| ? |
AcerPowerkey |
Powerkey.exe |
PowerKey utility for Acer TravelMate notebook PCs.
What does it do and is it needed? |
| Y |
ACMonitor_Xxx |
ACMonitor_Xxx.exe |
Associated with the Lexmark Xxx (where "xx" is the model)
all-in-one printer/scanner/copier. Required for correct operation |
| X |
acocash |
fastdown.exe
fastfown.exe |
Adult content dialler |
| U |
Acombo3dmouse |
Acombo3d.exe |
Mouse driver - required if you use non-standard Windows
driver features |
| X |
Aconti |
aconti.exe |
Adult content dialler |
| U |
acoustic |
acoustic.exe |
Control panel program for Philips
Acoustic Edge soundcard. Not required unless changed settings aren't
retained |
| N |
acpart |
agpart11.exe |
Program for finding trucks on-line |
| N |
Acrobat Assistant |
ACROTRAY.EXE |
If you want to create a PDF using Acrobat Distiller, you
can execute this program manually just before doing so |
| ? |
ActionAgent |
actionagent.exe |
?? |
| N |
Action Manager
32 |
am32.exe |
Associated with a Plustech scanner. Small utility that runs
in the background for doing fax/copy/etc. Available via Start -> Programs |
| N |
Activation |
Activation.exe |
Part of Microsoft Money |
| U |
Activboard |
MMKeybd.exe |
Packard Bell ActiveBoard keyboard - multimedia keyboard
manager. Required if you use the additional keys and want to see the status
of the Num Lock, Caps Lock, Scroll Lock keys |
| X |
ActiveDesktop |
systray32.exe |
Added as a result of the
DABOOM VIRUS! |
| N |
ActiveEyes |
ActiveEyes.exe |
ActiveEyes from TFI Technology |
| U |
ActiveMenu |
ActiveMenu.exe |
Goes with Wild Tangent demo games that come with some HP
computers. Unchecking it can prevent the games from running occasionally |
| U |
ActivePlus |
activeplus.exe |
Interactive
Agents Plugin for
Messenger Plus!
(MSN Messenger add-on) |
| Y |
ActiveShield |
MCVSSHLD.EXE |
McAfee VirusScan On-line. See also McAgentExe |
| N |
ActivSurf |
backweb*****.exe |
Packard Bell ActivSurf - automatically detects an internet
connection and downloads any available updates |
| U |
AD2KClient |
AD2KClient.exe |
Executable for
Active
Disk from Iomega disk - allows software applications to be run directly
from an Iomega Zip® disk. Required if you wish the applications to launch on
insertion of a disk |
| N |
AdaptecDirectCD |
Directcd.exe |
DirectCD primarily allows you to drag and drop files onto a
suitably formatted CD-RW disc. Unless you use this on a frequent basis it
isn't required and is available via Start -> Programs. Start the program
before inserting a DirectCD formatted CD-RW in the drive. A re-boot is
recommended if you close Adaptec DirectCD before re-opening it again later |
| N |
Adaware Bootup |
ad-aware.exe |
Ad-aware
from Lavasoft. Checks your PC for "Spyware" which reports back your internet
activities to "base". Available via Start -> Programs |
| U |
Ad Blocker |
blocker.exe |
Ad Blocker
- blocks popups, and also removes banners, image ads and flash ads |
| ? |
ADG |
ADG.exe |
SoundBlaster Audigy related? |
| N |
ADGJdet |
ADGJDet.exe |
Added with SoundBlaster Live! or Audigy soundcards for
headphone autodetection |
| X |
ADM Library
Loader |
admlib32.exe |
Added as a result of a variant of the
SDBOT VIRUS! |
| U |
Ad-Muncher |
ADMUNCH.EXE |
Ad
Muncher removes adverts, pop-ups and general annoyances in your browser,
file-sharing and messenger programs. Causes conflicts with Outlook, game
sites and web-building applications |
| U |
Adobe Gamma
Loader |
Adobe Gamma Loader.exe |
Adjusts monitor colours across all programs, including
Photoshop. It is needed by some graphics professionals who want their
monitor calibrated. Most home users will not need it. In my case I can
verify this as Photoshop loads fine |
| ? |
Ad Online Guide |
adonlineguide.exe |
?? |
| X |
adp |
adp.exe |
Spyware installed by Net2Phone, Limewire, Cydoor, Grokster,
KaZaa, etc |
| N |
ADQuickAccess |
Adtray.exe |
After Dark for Windows. Screen saver creation program
produced before screen savers became integrated into Win95 |
| U |
ADService |
ADService.exe |
Part of Iomega's
Active
Disk - allows software applications to be run directly from an Iomega
Zip® disk. Required if you wish the applications to launch on insertion of a
disk |
| U |
AdsGone |
Adsgone.exe |
AdsGone
- pop-up stopper |
| N |
ADSL
Diagnostic Tools |
mapiicon.exe |
System tray access to ADSL modem diagnostic tools.
Available via Start -> Programs |
| Y |
ADSS |
ADSS.exe |
ADSS is part of
Access Denied security
and privacy software (Access Denied Security Server) that monitors power
status and provides some other services for Screen Guard. Important to keep
its running while using Access Denied |
| U |
AdSubtract |
adsub.exe |
AdSubtract blocks ads, cookies, pop-up windows, animations, music, and
more. Can be disabled from within AdSubtract. Available via Start ->
Programs |
| U |
ADUserMon |
ADUserMon.exe |
Part of Iomega's
Active
Disk - allows software applications to be run directly from an Iomega
Zip® disk. Required if you wish the applications to launch on insertion of a
disk |
| X |
Adult_Chat |
Adult_Chat.exe |
Adult content dialler |
| X |
Adult_Chat1 |
Adult_Chat1.exe |
Adult content dialler |
| N |
Advanced
Tools Check |
ADVCHK.EXE |
Checks when you install a new
version of a Norton product that you have uninstalled all previous versions.
Serves as a reminder if you forget |
| X |
Advapi |
Advapi.exe |
Added as a result of the
NETDEVIL.12 (NetDevil 1.2) VIRUS! |
| U |
Advertising
Killer |
Akiller.exe |
AKiller - pop-up stopper |
| U |
Ad-watch |
Ad-watch.exe |
Part of Lavasoft
Ad-aware
Plus - realtime spyware-monitor watching your memory and registry for
spyware that tries to install or change your system |
| N |
AELaunch |
AELaunch.exe |
Audio Applications Launcher for the Philips
Acoustic Edge soundcard |
| ? |
AeXSWDUsr |
AeXSWDUsr.exe |
Altiris
Express NS Client Manager software. Is it required? |
| U |
AEZBProc |
aptezbp.exe |
IBM Aptiva keyboard customizer - enables certain special
buttons on keyboard for CD operation, volume control, and few quickstart
buttons. Keyboard will work without it but you lose the special functions |
| U |
AFAFilter |
windefault.exe |
AFAFilter - internet filter software |
| N |
Agent |
Agent.exe |
Cyberlink Power VCR II 3.0 is a TV tuner recording utility. If you want
to schedule recordings you'll need this, otherwise can be disabled.
Available via Start -> Programs |
| ? |
Agente |
Remupd.exe |
Part of
Panda Antivirus Titanium. Is this an update
reminder (guess because of the name), virus definition update reminder or
something similar? |
| U |
AgfaCLnk |
AgfaCLnk.exe |
For Agfa digital cameras connected via USB.
Enables Windows to access the contents of the memory stick (while the
stick's still on the camera) via a virtual drive |
| Y |
AGRSMMSG |
AGRSMMSG.exe |
IBM AMR modem driver |
| N |
AGSatellite |
AGSatellite.exe |
Program from AudioGalaxy that lets you download some MP3s
from their server. Available via Start -> Programs |
| U |
ahfp
or
ahfprog |
ahfp.exe |
Advanced
Hide Folders - "is powerful file security program. It allows to hide
folders or hide files. Advanced Hide Folders is very useful to keep your
personal data away from others. Others will not know where your personal
files exist and they will not be able to accidentally view, delete or modify
them either" |
| N |
AHQInit |
ahqinit.exe |
Part of AudioHQ for the Soundblaster
Live!. Appears as though it makes the AudioHW toolbar drop down from the top
of the desktop and isn't required |
| N |
AIM |
aim.exe |
AOL Instant Messenger. If connected to the internet,
automatically runs up AIM. Convenience more than anything. Available via
Start -> Programs |
| N |
AimingClick |
AimingClick.exe |
AimingClick from AimingTech. Web searching tool. Available via Start ->
Programs |
| X |
AIM reminder |
AIM reminder.exe |
Added as a result of the
BUDDY VIRUS! |
| N |
AIMster |
?? |
Peer to Peer (P2P) file sharing client that runs over the
AOL Instant Messenger network. Available via Start -> Programs |
| Y |
Aiptek Graphics Tablet (USB) |
atwtusb.exe |
USB interface for Aiptek Graphics Tablet (USB) |
| ? |
AlarmWatcher |
AlarmWatcher.exe |
Associated with SynTPEnh and SynTPLpr
which are from Synaptics for touchpads on laptops. What does it do and is it
required? |
| N |
Album Fast Start |
ABMTSR.EXE |
Scanner software, not required for scanner to work |
| ? |
Alcom PCL
Capture |
FMW_PCAP.EXE |
?? |
| X |
Alevir |
Alevir.exe |
Added as a result of the
OPASERV.A VIRUS! |
| N |
Alexa |
Alexa.exe? |
Alexa Toolbar "is a downloadable toolbar that helps you navigate the
Internet as you surf, by instantly providing you with related information
about the site you're viewing". Available via Start -> Programs |
| ? |
ALFY Accellerator |
AlfyAC~1.exe |
?? |
| U |
All Aboard
Status |
stswin.exe |
All Aboard! Internet Connection Sharing status icon |
| X |
All Sea
screen saver |
TaskTray.exe |
"Free screensaver", installs lots of foistware. See
here. Get rid of it |
| X |
All Sea web
link |
FWLink.exe |
"Free screensaver", installs lots of foistware. See
here. Get rid of it |
| U |
Alogserv |
Alogserv.exe |
From McAfee VirusScan for logging scanning activities. In
some cases, if left running it can cause CPU % usage to go between 5-95% or
go to and stay at 100%. Disabling it impacts on the reported last scan date.
It is reported to cause jerky graphics response in many games. As of version
6, this is a critical component of McAfee and disabling it can cause a PC to
lock up |
| ? |
Alps
Electric USB Server |
Monserv.exe |
Alps Electric USB Server. What does
it do and is it required? |
| U |
AlpsPoint
or
Apoint |
Apoint.exe |
Touchpad software for laptop PC's. For instance it is found
on the Panasonic machines and allows part of the touchpad to be used for
document or Web-page scrolling. Required for proper functioning of the
pointing software but not required for the laptop to work |
| U |
AlwaysOnTopMaker |
AlwaysOnTopMaker.exe |
Always
On Top Maker - utilty to enable an application to always be displayed
"on top" of others on the desktop |
| N |
AME_CSA |
rundll32 amecsa.cpl, RUN_DLL |
Loads ADSL modem Control Panel applet |
| N |
America Online *.*
Tray Icon |
aoltray.exe |
Puts AOL icon in System Tray (*.* denotes version if
present). Connect to AOL via the desktop shortcut or Start -> Programs |
| Y |
Amon |
AMON.EXE |
Monitoring part of Eset's
NOD32
virus-scanner |
| Y |
Amonitor |
amon.exe |
Tiny
Personal Firewall |
| N |
Announcements |
Annclist.exe |
MS WebTV for Windows. Used to display TV on your PC via a
compatible video card with in-built tuner (such as ATI All-In-Wonder). If
you don't use it - uninstall it |
| N |
Anntext |
Anntext.exe |
Caere Pagekeeper text annotation server |
| U |
Another Internet
Explorer Popup Killer |
aiepk.exe |
Another IE Popup Killer - pop-up stopper |
| U |
Anti-keylogger
check |
antikey.exe |
Anti-keylogger - protects against keylogger programs monitoring your
keystrokes |
| U |
AntiPopUp |
AntiPopUp.exe |
AntiPopUp
for IE - pop-up stopper |
| ? |
AntiVirusProtection |
qumk.exe |
?? |
| Y |
AnVir |
AnVir.exe |
AnVir virus
destroyer |
| U |
anvshell |
anvshell.exe |
System Tray tool for ASUS video cards. If disabled you lose
all the ASUS specific video card options in Control Panel -> Display
Properties -> Advanced as well as the System Tray shortcuts toolbar |
| ? |
anycom bluetooth |
ftflauncher.exe |
Associated with an Anycom bluetooth wireless card.
What does it do and is it required? |
| N |
AolFix |
AolFix.exe |
Run on Gateway Astra computers, and maybe a few others.
Designed to repair a bad registry key in Gateway computers that would not
allow AOL to run correctly. Not seen much any more and should only run once |
| X |
Aornum |
aornum.exe |
Installed along with
iWon Prize Machine. Based upon their
privacy statement this can be regarded as spyware |
| Y |
apc_tray |
apc_tray.exe |
Part of the APC UPS software loaded with the BACK-UPS CS
350 unit. Required to monitor the APC unit in case of power failure |
| Y |
APC UPS Status |
Display.exe |
APC PowerChute Personal Edition status icon |
| U |
Appcon |
vAppCon.exe |
Vital Application Console - part of
POS-partner
2000 point-of-sale software from Vital. This is the taskbar icon and is
enabled at startup by the "Auto-start when OS starts" option. Required for a
connection to be established |
| U |
AppExtender |
AppExtCB.exe |
Loads the
Confimax add-in for popular E-mail programs to confirm E-mails have been
sent and received |
| Y |
Application |
mdmsetsp.exe |
Aztech Labs modem driver |
| Y |
Apwheel |
Apwheel.exe |
Wheel support for an Alps mouse |
| ? |
Apvxd |
APVXDWIN.EXE |
Part of
Panda Anti-Virus.
What is this part and is it required? |
| Y |
Apvxdwin |
APVXDWIN.EXE |
Part of
Panda Anti-Virus.
Required to enable permanent virus protection |
| N |
ARCSolo Recovery |
N/A |
Backup software by Computer Associates - no longer
supported |
| Y |
ashMaiSv |
ashmaisv.exe |
Avast!
anti-virus software - probably E-mail protection based
upon the name? |
| U |
AsioReg |
regsvr32.exe ctasio.dll |
ASIO (Audio Stream In/Out) drivers for the SoundBlaster Audigy 2 series
soundcards - for recording and home project studios. Required if you use
this functionality |
| Y |
AspireTimeMachine |
acertmb.exe |
System recovery software supplied with some Acer notebook
PCs. Similar to GoBack and the restore program in WinXP, allowing you to
restore a PC back to a working state with minimal re-entry |
| N |
Astro |
Astro.exe |
Checks for updates to Quicken on a system reboot |
| N |
ASUSKey |
V38SHELL.EXE |
System tray Icon for quickly changing video modes |
| U |
ASUS SmartDoctor |
VGAProbe.exe |
ASUS video card fan/thermal monitor |
| U |
ASUS TweakEnable |
astart.exe |
Restores manually changed settings for ASUS based video
cards such as overclocking. Only required if you use non-standard settings |
| N |
ASWDP |
ASWDP.exe |
MLS Pulse - real estate software. Keeps the home buyer/seller
continually informed on the status of his/her local/regional real estate
market |
| X |
ASWnk |
aswnk.exe |
Adult content dialler |
| ? |
Ati2cwxx |
Ati2cwxx.exe |
For some ATI video cards. Probably
used to access features and may not be required - for example the ATI Radeon
works fine without it |
| ? |
Ati2mdxx |
Ati2mdxx.exe |
For ATI video cards. System Tray
access to display mode changing? |
| U |
AtiCwd
or
AtiCwd32 |
AtiCwd.exe
AtiCwd32.exe
Ati2cwad.exe |
This utility adds the ATI tab in the advanced display
properties (gives the option for TV out). Do not uncheck if there is TV out
on the video card |
| N |
ATI
GART Set-up Utility |
Atigart.exe |
Program that checks the motherboard chipset and determines
which GART driver bundle to install on ATI video cards. If you have one,
once installed it shouldn't be needed |
| N |
AtiKey |
AtiKey32.exe
atiptkad.exe |
System Tray access and key-combo shortcuts to common
display functions on ATI video cards. Can be run from Start-> Settings ->
Control Panel -> Display |
| U |
ATI Lauchpad |
launchpd.exe |
Convenient way to start all your Multimedia Center
applications (DVD, Video CD, CD Audio, File Player). You can right-click
LaunchPad, and uncheck Load on Startup in the menu |
| ? |
ATIModeChange |
Ati2mdxx.exe |
For ATI video cards. System Tray
access to display mode changing? |
| U |
ATIPOLAB |
ati2evxx.exe |
ATI External Event Utility EXE Module. This task can
comsume lots of CPU resournces on some computers, but it can help with
graphics card problems. Leave enabled unless it consumes too many CPU
resources |
| U |
AtiPTA
or
AtiPTAAA
or
atiptaxx |
Ati2ptxx.exe
Atiptaxx.exe |
Control panel for the ATI series of video cards allowing
access to such features as display resolution, colour depth, etc. Available
via Start -> Settings -> Control Panel -> Display. Some users may need it if
they have optimised their settings |
| U |
AtiQiPcl |
AtiQiPcl.exe |
Used for hardware DVD decoding on ATI video cards
supporting this feature. Not required unless you regularly play DVD's |
| N |
ATI Scheduler |
Atisched.exe |
Component that remains resident in memory and automatically
launches the ATI VIDEO PLAYER at a user selected time and date. Delete the
shortcut in the Start -> Programs -> Startup folder as well. Functions could
re-enable the program to load at start-up and re-introduce the shortcut. Try
it and see |
| U |
ATISmart |
ati2s9ag.exe |
ATI's "SMARTGART", which is included with the "Catalyst"
drivers. When the system boots, it runs a couple of bus tests & tries to
apply the most stable settings |
| X |
atisrc2 |
windfind.exe |
Unidentified VIRUS! |
| N |
ATI Task
Application |
Atitkad.exe |
System Tray access to common display functions on ATI video
cards. As above |
| N |
ATI Task Application (Atikey) |
Atitask.exe |
System Tray access and key-combo shortcuts to common
display functions on ATI video cards. Can be run from Start-> Settings ->
Control Panel -> Display |
| U |
ATIX10 |
atix10.exe |
ATI
Remote Wonder - PC wireless remote control |
| N |
ATnotes |
atnotes.exe |
Loads the ATnotes program for virtual sticky notes for your
desktop. Available via Start -> Programs |
| N |
Atomica |
atomica.exe |
Atomica
runs from the System Tray and allows the user to find out more about a word
or phrase on any screen by pointing at it with the mouse and clicking button
one while holding down the Alt key |
| U |
AtomicTime |
ATOMICTIME.EXE |
AtomicTime - utility that synchronizes your PC clock to an atomic clock |
| U |
Atrack |
atrack.exe |
New feature of Norton Internet Security (NIS) and Norton
Personal Firewall (NPF) 3.0 is the Alert Tracker, an instant notification
feature. The Alert Tracker displays information about events as they happen.
This way, when a rule has been triggered or an access to the Internet made,
you know about it immediately rather than finding out about it when you
check your logs or notice that the NIS icon indicates a security alert |
| U |
ATTBroadbandUpdate |
SAUpdate.exe |
Big Brother
from Quest Software. System and network monitor |
| U |
ATTRedUpdate |
AutoUpdate.exe |
Additional item added to start-ups after AT&T took over the
now bankrupt Excite@home high-speed internet service. Included for
automatically downloading and installing updates. Leave it unless you plan
to regularly run it to check for updates |
| X |
AttuneClientEngine |
attune_ce.exe |
"Attune is a revolutionary service that provides you with
targeted Intelligram messages to help you avoid common computer problems.
Attune may also let you know when you need a specific product, service, or
upgrade to optimise the use of your computer". Not required - treated as
adware |
| X |
AttuneContentUpdater |
attune_cu.exe |
Related to the above. All needed for the program to do its
job properly |
| X |
AttuneDiscovery |
attune_di.exe |
Related to the above. All needed for the program to do its
job properly |
| X |
AttuneSystray |
attune_st.exe |
Related to the above. All needed for the program to do its
job properly |
| N |
aTuner |
atuner.exe |
aTuner
- tweak tool for GeForce based graphics cards |
| Y |
atwtusb |
atwtusb.exe |
USB interface for Aiptek Graphics Tablet (USB) |
| U |
AU Agent |
AUagent.exe |
Au
Agent from Zilab Software. Win2K/NT enhancement tool. Allows you to run
applications under any security context without closing the whole logon
session to process a new logon |
| Y |
AUCBPNP |
aucbnpn.exe |
Adaptec USB CardBus Safe-Eject - driver for the
Adaptec USB 2.0 CardBus which provides USB 2.0 ports for laptop users
via a PCMCIA card slot |
| ? |
AudCtrl |
RunDll32 AudCtrl.dll, RCMonitor |
Audio control panel? |
| N |
AudioHQ |
Ahqtb.exe |
For Creative Soundblaster Live! series soundcards. System
tray application for SB Live! functions. Available via Start -> Programs |
| ? |
Autobar |
?? |
?? |
| N |
AutoEA |
Ahqrun.exe |
For Creative Soundblaster Live! series soundcards. Specify
for any audio application what audio preset to automatically associate with
currently active speaker output. Available via AudioHQ |
| N |
AutoMate
Task Service |
automate.exe |
Task scheduler for
Unisyn Automate 4 task
automation/macro running software. Available via a desktop shortcut or Start
-> Programs |
| N |
Automatically launches the United Devices Agent when you start your computer |
UD.EXE |
The
United
Devices Agent can recycle your PC's unused resources and use them to
perform valuable scientific and medical research without disturbing your
usual computer use - similar to SETI@home but for medical research.
Available via Start -> Programs |
| U |
AutoSizer |
AUTOSIZER.EXE |
AutoSizer
- utility that automatically maximizes windows when they're opened |
| X |
AutoUpdater |
aupdate.exe |
Aupdate,
Tinybar variant. Spyware |
| Y |
Aureal A3D Interactive Audio |
sa3dsrv.exe |
For Aureal based 3D soundcards. A3D sound features won't
work with this disabled |
| Y |
Aureal A3D Interactive
Audio Init |
A3dInit.exe |
For Aureal based 3D soundcards. A3D sound features won't
work with this disabled |
| X |
ausvc |
ausvc.exe |
Added as a result of the
AUTOUPDER VIRUS! |
| N |
AUTOPROP |
REGPROP.EXE
WMPADDIN.DLL |
Both the files are in the MS Office/Bots/FP_WMP directory.
Apparently, it registers the FrontPage WiMP extension |
| N |
AutoSpell 5 |
ASWATC32.EXE |
AutoSpell - spell checker |
| ? |
Auto T Bar
or
autotbar |
autotbar.exe |
Found in the /hp/bin directory on a
HP PC? |
| N |
autoupd
(1) |
autoupd.exe |
Raxco Software Auto Update utility."Used to keep your software
up-to-date" |
| X |
autoupd
(2) |
autoupd.exe |
VIRUS! - found in a folder of the same name |
| N |
AUXXTRAY |
au30setp.exe |
System Tray application for Aureal Vortex based soundcards.
Can be run manually via Start -> Settings -> Control Panel |
| ? |
AutoShutdown |
pssvc.exe |
Utility to fix vCard Export in MS
Outlook 2000 - although why are these together? |
| Y |
Avast32 |
Astart32.exe |
Avast32 anti-virus - scanner |
| Y |
Avast! |
ashserv.exe |
Avast!
anti-virus software - probably the main scanner? |
| U |
AvconsoleEXE |
Avconsol.exe |
From McAfee VirusScan up to version 4.x and Dr Solomon's
VirusScan. Used to schedule regular scans. If you don't have scans scheduled
you don't need it |
| X |
AveoAttune |
atmdlusr.exe |
Related to AttuneClientEngine
above |
| Y |
AVG_CC
or
avgcc32 |
avgcc32.exe |
AVG anti-virus control center. Also enables scheduled
tests, Outlook E-mail plug-in and automatic updates |
| Y |
AVGCtrl |
AVGCTRL.EXE |
Background task of the
AntiVir
antivirus program which scans files transparently in the background |
| Y |
Avgserv9.exe |
Avgserv9.exe |
Background monitoring program for AVG anti-virus |
| Y |
AvMaiSrv |
Avmaisrv.exe |
Avast32 anti-virus - E-mail scanner |
| Y |
avpcc |
avpcc.exe |
Kaspersky Labs anti-virus |
| X |
Avril
Lavigne - Muse |
<filename> |
Added as a result of the
AVRIL-A VIRUS! where <filename> is random |
| U |
AVWUpd32 |
AVWUPD32.EXE |
AntiVir updater. Useful, but can be run manually |
| Y |
avx communicator |
xcommsur.exe |
Anti-virus part of
BitDefender virus
scanner/firewall |
| Y |
avxlni |
avxinit.exe |
Anti-virus part of
BitDefender virus
scanner/firewall |
| N |
awhost32 |
awhost32.exe |
Part of Symantec's
pcAnywhere remote PC management software. Provides an automatic startup
of the client PC in host mode in conjuction with a host-definition file, so
system administrators can access the machine. Can cause a 10% reduction in
speed and not recommended |
| ? |
AxFilter |
Rundll32 AXFILTER.DLL,
Rundll32 |
?? |

| |
Name/Startup Item |
Command |
Comments |
| X |
b3d |
BDEsecureinstall.exe |
B3d
Projector - installed along with the KaZaA file sharing utility. Causes
a program called "ZUPDATE.EXE" to periodically try and access the internet.
(1) Uninstall it via Start -> Settings -> Control Panel -> Add/Remove
Programs. (2) Remove the BDEsecureinstall.exe if still present in
C:\Windows\System. (3) Disable and ideally delete it from the registry. (4)
Remove the "BDE" directory and all its contents |
| X |
b3dUpdate |
Zupdate.exe |
Same as above but not installed via KaZaA |
| X |
b9 |
B9.exe |
FireTrust Benign - allows you to receive e-mail which is safe from
viruses, worms, scripts, web bugs, privacy threats and other security risks,
without affecting your e-mail. "Benign neutralizes or strips out the code
that makes viruses, worms, scripts and other potentially harmful things run" |
| X |
babeie |
rundll32 cnbabe.dll,
dllstartup |
CommonName Toolbar spyware. To uninstall see
here |
| N |
Babylon
Translator |
Babylon.exe |
"Babylon-Pro
is a powerful information tool that instantly provides relevant information,
translations & conversions for any word or value you click on" |
| U |
BackgroundSwitcher |
bgswitch.exe |
Background Switcher Powertoy. Included with the last beta
version of the XP Powertoys. Whenever a user right clicked his desktop and
chose properties he could see a new tab which allowed him to enable a
"Desktop Slide Show." This would automatically change the Windows Desktop at
an interval specified by the user. Available
here |
| N |
Backpack UDF |
bpudfmon.exe |
Backpack UDF
packet writing software for Microssolutions' Back Pack external CD-RW drive.
Similar to DirectCD. Run manually before insert an appropriately formatted
CD-RW disk |
| N |
BackWeb |
backweb.exe |
Automatically detects an internet connection and downloads
any available updates. Typical on Compaq and HP PC's but not restricted to
those OEM's. Resource hog and often causes malfunctions. Available via Start
-> Programs |
| N |
Backwork |
Backwork.exe |
Backwork trojan detector |
| U |
BACPI10 |
bacpi10a.exe |
Known as "PowerKey" - a minimalistic keyboard driver that
allows power management keys on BTC keyboards to function properly in older
OS's (i.e. Win95/98/NT4). Also adds an icon to the system tray |
| N |
bacstray |
bacstray.exe |
Broadcom Advanced Control Suite - for modems and set top
boxes based upon Broadcom chipsets. Not required unless you have networking
problems |
| X |
bargains |
bargains.exe |
Bargain Buddy - advertising spyware installed with
Net2Phone & LimeWire amongst others. Some further information
here |
| ? |
Bart Station |
station.sbrt |
?? |
| N |
Batchreg1 |
N/A |
Part of the Windows System Recovery process. Added to the
registry via Msbatch.inf. The existence of this key or process after the
last reboot during installation indicates an unsuccessful installation, as
that key should be deleted automatically. See
here |
| U |
BatteryBar |
batterybar.exe |
BatteryBar - displays battery usage, and the current percentage of
battery power left |
| U |
Battery Scope |
batmgr.exe |
Monitors battery levels on a notebook/laptop PC |
| X |
BatzBack |
BatzBack.scr |
Added as a result of the
BACKZAT VIRUS! |
| U |
BAUSB |
BAUSB.exe |
Boston Acoustics Audio, USB driver |
| U |
BayMgr |
DockApp.exe |
Hot-swappable drive management on laptops allowing you to
change drives without closing down Windows. Only required if you frequently
swap bay devices |
| U |
Bayswap |
bayswap.exe |
Hot-swappable drive management on Compaq Notebooks which
allows you to swap drives without closing down Windows. Only required if you
frequently swap bay devices |
| U |
Bayswap2 |
TbUpdate.exe |
Hot-swappable drive management on Compaq Notebooks which
allows you to swap drives without closing down Windows. Only required if you
frequently swap bay devices |
| U |
bbui |
bbui.exe |
AOL DSL status monitor displaying a red/green icon
indicating if you have a connection |
| U |
BCDetect |
bcdetect.exe |
Bcdetect.exe searches the system to make sure Creative
drivers are installed for the video card. It loads the BlasterControl when
the drivers are detected. Your choice - try it and see |
| Y |
BCMDMMSG |
bcmdmmsg.exe |
BCM voicemodem driver. Required for dial-up if you have one
of these modems |
| U |
BCMHal |
rundll32.exe bcmhal9x.dll, bcinit |
BlasterControl for Creative video cards - controls for
desktop settings, monitor configuration, colour adjustments and performance
tuning. May be needed to retain settings |
| Y |
BCMSMMSG |
BCMSMMSG.exe |
BCM voicemodem driver. Required for dial-up if you have one
of these modems |
| U |
BCTweak |
bctweak.exe |
BlasterControl for Creative video cards - controls for
desktop settings, monitor configuration, colour adjustments and performance
tuning. May be needed to retain settings |
| N |
BCWipeTM |
bcwipetm.exe |
BCWipe
Task Manager - scheduler for BCWipe so that it runs at convenient times. You
can set a time for running the task, as well as special options for the
task. Run manually when needed |
| N |
BearShare |
bearshare.exe |
BearShare file sharing client. Versions known to include spyware - see
here |
| X |
bg |
bullguard.exe |
Bullguard antivirus and firewall. Gets auto-installed when
installing the latest version of Grokster. There are much better
alternatives available |
| N |
bgsmsnd |
bgsmsnd.exe |
Printer driver to generate PDF files from any program |
| N |
BHOCop |
BHOCop.exe |
ZDNet's
BHO Cop that lets you see what browser helper objects are installed.
Useful for detecting spyware |
| N |
bigfix |
BIGFIX.EXE |
BigFix
can automatically download and read technical support information provided
by computer and software manufacturers and other technical support experts
(published in the form of Fixlet® Messages) and can automatically check your
computer for bugs, configuration conflicts, and security holes. Should only
be started manually as it's a resource hog |
| U |
BigPond Toolbar |
bpumTray.exe |
Telstra
BigPond Toolbar - "Introducing the free and easy to use BigPond Toolbar
that is designed to make your internet experience and managing your Telstra
internet account a whole lot easier" |
| N |
Billminder |
Billmind.exe |
Can be setup in Quicken to remind user of due payments.
Available via Start -> Programs |
| U |
BitDefender for MSN Messenger |
msnmon.exe |
Bitdefender anti-virus for MSN Messenger. Unless you have MSN Messenger
running all the time start it manually |
| Y |
bitdefenderlive |
avxlive.exe |
Main program of
BitDefender virus
scanner/firewall |
| U |
BitDefender_P2P_Startup |
BitDefender_P2P_Startup.exe |
Bitdefender anti-virus for file transfers via internet messaging clients
such as ICQ and MSN Messenger. Unless you have these running all the time
start it manually |
| N |
BitWare
Print Monitor |
bwprnmon.exe |
FaxServe network fax software |
| N |
bjcfd |
cdf.exe |
BroadJump Client Foundation. Broadband troubleshooting software
installed by various companies. Not required and you can remove it via
Add/Remove programs |
| N |
BJ Status
Monitor 5xx |
CJSTRxx.EXE |
Canon printer status monitor - where "xx" is different
depending upon the version. Not required as you can check the printer status
via My Computer -> Printers |
| N |
BlackIce Utility |
blackice.exe |
Loads the user interface for the
BlackICE PC Protection (was Defender) firewall program. From the
parent site - '(the
user interface) starts in the "Startup" menu and adds itself to the taskbar.
The user interface is independent from the rest of the system and only
displays the output or reconfigures the system. It does not need to be
running for the rest of the system to run.' See also LoadBlackD |
| N |
BlazeChanger |
FBZPaper.exe |
Ember graphic file viewer, manager, and touch-up system |
| ? |
bldbubg |
bldbubg.exe |
Found on a Dell machine?? |
| U |
BlockAds
or
blads |
blads.exe |
A Tweak-XP
component, blocks advertisement banners in Internet Explorer. Can be
enabled/disabled via Tweak-XP / Internet Tweaks |
| ? |
BlockTracker |
BlockTracker.exe |
Found on a HP machine?? |
| N |
BLSTAPP |
blstapp.exe |
Puts access to Creative's BlasterControl in the System Tray |
| N |
BMail
Installation |
FTP_back.exe |
Part of
iMesh - a file sharing system. Reported by Norton AntiVirus as a trojan.
Once deleted does not prevent file sharing working. Older versions of iMesh
re-instate this but the newer versions do not |
| U |
BMO
MasterCard Wallet |
EWALLET.EXE |
The wallet conveniently stores billing, shipping and
payment information on your PC |
| N |
BMupdate |
BMupdate.exe |
Related to BookmarkCentral
below. Typically added after downloading drivers for Visioneer scanners for
example, and you install the driver self-install |
| X |
Bnexe |
%filename% |
Added as a result of the
KITRO.D (or
ARGEN.A) VIRUS! %filename% can be anything |
| Y |
BOCleanautostart |
Boclean.exe |
NSClean's
BOClean
anti-trojan software |
| U |
bombshel |
BOMB32.EXE |
Part of McAfee Nuts & Bolts. Protects your Windows system
from application failure and crashes - similar to Norton Crashguard. Your
choice - may cause problems |
| X |
Bonzi Buddy |
?? |
Spyware - read
here for information and
here for removal instructions |
| N |
BookmarkCentral |
BMLauncher.exe |
Bookmark Express - "offers a more flexible way to manage Web site
bookmarks, regardless of which browser you use" |
| U |
Boost XP Service |
bxservice.exe |
Boost
XP from Systweak - WinXP tweaking utility |
| X |
boot |
boot.exe |
Added as a result of the
ELEM VIRUS! |
| X |
BootLoader |
BootLoader.exe.vbs |
Added as a result of the
WATERWORKS VIRUS! |
| X |
Boot Manager |
Njgal.exe |
Added as a result of the
KILO VIRUS! |
| U |
BootStatus |
BOOTST~1.EXE |
Visual Basic program that pops up a small window on startup
telling you how many times the machine has been booted that day. Once you
exit it, it has no more effect on resources |
| N |
Bose Wave/PC
Monitor |
wavepcmonitor.exe |
System Tray access for this system (more info on the system
here). Available via Start -> Programs |
| U |
bpcpost.exe |
bpcpost.exe |
MS TV Viewer Post Setup Program. Part of MS WebTV for
Windows. Used to display TV on your PC via a compatible video card with
in-built tuner (such as ATI All-In-Wonder). If you don't use it - uninstall
it |
| X |
Brasil |
Brasil.exe |
Added as a result of the
OPASERV.E VIRUS! |
| Y |
Brindys BriTray |
BRITRAY.EXE |
Main process for the following applications: GEDEX,
SICARIO, BRINOTES, BRIRESPA, SICURE, TRASGO, UNDOCS, FRESH & BRIFAME (all of
them from Brindys Software).
Performs the following tasks [un]installation, web software autoupdate,
notification windows, interprocess communication, tray bar icons & menus,
alarms (brinotes), and common web launching from the mentioned applications.
Can be stopped safely once run if so desired |
| N |
Broadband Wizard |
bbwiz.exe |
Starts
Broadband Wizard
so it runs in the System Tray. This application tests and optimizes your
Cable or DSL connection. Available via Start -> Programs |
| X |
browser aid |
browseraid.exe |
BrowserAid/BrowserPal foistware |
| Y |
Browser
Hijack Blaster |
bhblaster.exe |
Browser Hijack Blaster - protects your system from browser hijackers and
spyware that alters your IE settings |
| U |
Browser Launcher |
Commandr.exe |
Logitech internet keyboard "Commander" software - loads the
software for the shortcut keys on the keyboard. Not required unless you want
to use the short cut keys |
| X |
Browser Pal |
adblck.exe |
BrowserAid/BrowserPal foistware |
| N |
BrowserWebCheck |
loadwc.exe |
Checks to make sure that IE is still your default browser |
| N |
B'sCLiP |
BSCLIP.exe |
CD recording utility that comes with a lot of CDR/CDRW
drives and isn't required |
| ? |
btinst |
btinst.exe |
Associated with an Anycom bluetooth wireless card.
What does it do and is it required? |
| ? |
bttray |
bttray.exe |
Associated with an Anycom bluetooth wireless card.
What does it do and is it required? |
| Y |
BTUSRBDGF |
BtUsrBdg.exe |
Used with a
Mitsumi USB
Bluetooth adaptor |
| N |
Buddyizer |
Buddyizer.exe |
Part of the AIMster Peer to Peer
(P2P) file sharing application that runs over the AOL Instant Messenger
network |
| U |
bugwatcher
service |
bugwatcher.exe |
Bugtoaster is a service that sends reports on system/program crashes
(certain types) back to Bugtoaster. They relay information to program
authors and provide, if available, any known solutions to the crashes. It
doesn't take up any room in memory, just activates in the event of certain
program failures |
| ? |
BullsEye Tracker |
BeTrack.exe |
Bullseye - intelligent research assistant |
| N |
ButtonKey |
ButtonKey.exe |
CyberView TWAIN driver for the
Pacific Image range of 35mm film scanners. Enables the one touch
scanning button and places an icon an the System Tray. Use your scanners
software or run it manually by creating a shortcut |
| U |
Button Server |
bttnserv.exe |
Found on a Compaq PC, for the extra buttons on the keyboard
for the speaker volume, media player, sleep and internet buttons. If the
buttons aren't used on the keyboard or your's doesn't have them, then it
isn't required |
| U |
Buzof.exe |
buzof.exe |
Buzof from
Basta Computing "enables you to automatically answer, close or minimize
virtually any recurring window including messages, prompts, and dialog
boxes" |
| N |
Buzme |
Bmui.exe |
Buzme
by RingCentral, Inc - internet call waiting. Intercepts telephone calls like
an answering machine and plays the voice message on your PC. Only required
when you're on-line and via dial-up modem |
| X |
Bymer.Scanner |
<filename.exe> |
Added as a result of the
BYMER VIRUS! where <filename.exe> is the filename |

| |
Name/Startup Item |
Command |
Comments |
| U |
C2K |
CYB2K.EXE |
CYBERsitter 2000 or 2001 - anti-porn filter primarily.
Required if you want the sites you visit filtered without having to load the
software every time you launch your browser |
| N |
Cacheman |
Cacheman.exe |
Freeware disk cache tweaker from
Outer Technologies. Should only be
run once and not loaded at start-up |
| U |
Caddais
BackupOnDemand |
BODMon.exe |
Caddais BackupOnDemand - "runs in the background and monitors your
important files for changes. Within seconds of changing, modified files are
automatically backed up to an archive location" |
| U |
CADS |
cads.exe |
Cyber Sentinel internet filtering software |
| N |
CAgent |
CAgent.exe |
Abbyy
Fine Reader OCR (Optical Character Recognition) software for scanning
and converting documents |
| X |
cAgOu |
<filename>.hta |
Added as a result of the
KAKWORM VIRUS! |
| N |
CallControl |
ftctrl32.exe |
FaxTalk Messenger Pro is a Windows TAPI based 32-bit
application. When installed, the software automatically loads FaxTalk
CallControl when you start Windows. When FaxTalk CallControl is running, any
TAPI compliant application can request to use the modem from Windows |
| N |
Cal
Reminder Shortcut |
calrem.exe |
Produces a pop-up reminder of events scheduled using the MS
Office Calendar |
| N |
CamCheck |
CamCheck.exe |
NuCam
camera software related |
| N |
Camio Viewer x |
IXApplet.exe |
Image viewing program that comes with digital cameras.
Shows pictures that are in the camera before downloading them. "x" in the
name is the version |
| ? |
CamMonitor |
hpqcmon.exe |
From HP and related to digital
imaging |
| N |
Canada |
Canada.exe |
Known to be a dialler - but is it
maliscous or clean? |
| N |
Canon Printer Monitor BJCxxx |
Cjstlst.exe |
Trayicon for Canon printer. xxx denotes model. Available
via Start -> Programs |
| N |
Capfax |
capfax.exe |
PhoneTools fax software |
| N |
Capture
Express 2000 |
capexp.exe |
Capture Express - screen capture utility |
| N |
Card Monitor |
REGCNT09.exe |
For the USB connection on a Panasonic PV-DV701 Digital
Camcorder. Available via Start -> Programs |
| U |
CARPservice |
carpserv.exe |
Associated with
Zoltrix modems -
enables the internal modem speaker, allowing you to listen to the dial-up
sounds for example |
| ? |
CasAgnt |
CasAgnt.exe |
Related to a Casio PDA - but what
does it do and is required? |
| U |
CBWAttn |
CBWAttn.exe |
Required for
Bitware to answer incoming faxes, can cause sleep mode problems |
| U |
CBWHost |
CBWHost.exe |
Required for
Bitware to answer incoming faxes, can cause sleep mode problems |
| ? |
CBWUser |
CBWDial.exe |
Associated with
Bitware that integrates fax, voice, pager, and data communications on
your desktop |
| X |
CC2KUI |
comet.exe |
Comet Cursor - displays different mouse pointers dependent
upon the site your visiting. Malware because it automatically installs. See
here
for more information and for the uninstall procedure |
| Y |
CcApp |
ccApp.exe |
Part of
Norton
AntiVirus 2003. Auto-protect and E-mail check will not function without
this |
| N |
Ccdecode |
rundll32.exe streamci,
StreamingDeviceSetup |
Part of the closed caption decdoder/MS VBI codec. Should
only run once |
| Y |
CCDoctorLogonTesting |
ccdoctor.exe |
Checks your system to make sure it's configured properly
for running
Rational ClearCase, a source code management tool. ClearCase is fairly
sophisticated so there are a lot of system-related things that can cause it
grief. If you run ClearCase you should not disable this as it provides a
valuable service, but technically it isn't required to use the ClearCase
product |
| Y |
CcEvtMgr |
ccEvtMgr.exe |
Part of
Norton
AntiVirus 2003. Event manager for
scheduling weekly scans and or automatic virus updates. Used to start
automatically via CcApp and was not required as a
seperate entry but a recent update changed this |
| ? |
CcPxySvc |
CCPXYSVC.exe |
Part of
Norton
AntiVirus 2003. E-mail proxy service? Is it
required |
| X |
ccreg |
explorer.exe |
Added as a result of the
ZCREW VIRUS! Note - this is not the valid explorer.exe |
| Y |
CcRegVfy |
ccRegVfy.exe |
Part of
Norton
AntiVirus 2003. "ccRegVfy.exe is responsible for checking the integrity
of the NAV registry entries to make sure that the information has not been
changed by a malicious threat or a hack" |
| N |
?? |
CDANTSRV.exe |
C-Dilla License Management software. Used for any program
that uses C-dilla Protection, example: 3D Studio Max 4.x. It loads as a
service automatically but is not needed unless you run said program. Can be
started and stopped manually |
| N |
CDInterceptor |
cdi.exe |
CD indexer for measuring the speed of CD players |
| N |
CDTray |
CDTray.exe |
On HP PCs, this is the small CD icon next to the time |
| ? |
CeEKEY |
CeEKey.exe |
Toshiba Satellite E-Key related. Is
it required? |
| ? |
CeEPOWER |
cepmtray.exe |
Toshiba power management related. Is
it required? |
| N |
CFD |
CFD.exe |
BroadJump Client Foundation. Broadband troubleshooting software
installed by various companies. Not required and you can remove it via
Add/Remove programs |
| Y |
cfgintpr |
cfgintpr.exe |
Configuration Interpreter - part of
Tiny
Personal Firewall V4 |
| N |
cfgwiz |
cfgwiz.exe |
Introduced with Norton Anti-Virus 2002, this is a real
resource hog. Many NAV users will find they can live without loading it |
| U |
CGServer |
cgserver.exe |
Associated with an
Eicon
Networks ISDN or ADSL modem. Call Guard Server (CGserver) watches your
modem and blocks incoming or outgoing calls. You need cgard.exe (from
Startmenu) to configure cgserver with rules and telephone numbers. Good
against unwanted dialer programs |
| U |
ChamClock |
ChamClock.exe |
Chameleon Clock - system tray clock replacement |
| ? |
ChangeLines |
chngline.exe |
?? |
| N |
Check for One Touch Update |
wiseupdt.exe |
Checks for updates for Visioneer OneTouch scanners |
| U |
CheckIt |
ToolBox.exe |
CheckIt Toolbox from
WinCheckIt Diagnostic Software. Toolbox automatically backs up critical
system files (such as .ini files and the Windows Registry), and performs a
check on various system parameters at intervals you specify |
| U |
Check Messenger |
cmesseng.exe |
Check Messenger
from Qchex.com - program that helps you manage the activity of your Qchex
account |
| Y |
CheckMsgPlus |
MsgPlusH.dll,
VerifyInstallation |
Added by MSN Messenger Plus, a third party extension to MSN
Messenger. This is the auto-update feature - see
here for more info. |
| ? |
checktime |
ct.exe |
Found in the \HPSelect\Frontend\
directory on a HP machine. What is it's purpose and is it required? |
| U |
CherryKeyMan |
KeyMan.exe |
Multimedia keyboard manager for the
Cherry
keyboard series. Only required if you use any of the special keys |
| N |
CHKADMIN |
CHKADMIN.EXE |
Compaq Network Management System. When running, it places
an icon in the system tray titled "Intelligent Manageability" |
| X |
Choke |
Choke.exe-blahh |
Added as a result of the
CHOKE VIRUS! |
| U |
CHotKey |
mhotkey.exe
or
MK9805.EXE |
Enables special keys on Chicony keyboards. Special
combinations include Internet, E-mail, vol+, vol-, mute, etc. Only required
for extended features |
| N |
Christmas
Music Player |
TTEST6.EXE |
"Christmas Music Player brings the music of
the Christmas Holiday to your desktop" |
| ? |
ChromeMark |
keysh.exe |
Related to
this.
Don't know what keysh.exe does though and if it's required |
| X |
CiaBackdoor |
msldr.com |
Added by a VIRUS! |
| N |
CIJxP2PSERVER |
CIJxP2PS.EXE |
Compaq printer utility which is required in order to make
the printer work correctly - "x" depends upon the model, ie, for IJ300 x=3,
for IJ700 x=7 |
| N |
CISrvr Program |
CISRVR.EXE |
Related to internet setup on Compaq PC's |
| N |
CitiVAN |
CitiVAN.exe |
Option from
Citibank to change a
credit card number in a random fashion for each purchase. The number will
only be used once and never again |
| Y |
Cjstcom |
Cjstcom.exe |
Canon printer BJ status language monitor |
| U |
CleanSweep Smart
Sweep- Internet Sweep |
Csinsm32.exe |
Automatic logging of installs from Norton CleanSweep -
available via Start -> Programs |
| N |
CleanSweep Useage Watch |
CSUSEM32.EXE |
Quarterdeck/Norton CleanSweep component - tracks how often
you use files and alerts you to files that have not been used for a
specified period of time |
| N |
Cleanup |
ONICTASK.EXE |
Internet Cleanup from Aladdin Systems (used to be by OnTrack) - cleans
up tracks left by browsing the internet |
| U |
Clickoff |
Clickoff.exe |
Clickoff automatically dismisses annoying dialog boxes |
| N |
Click Radio
Tuner |
clickr~1.exe |
ClickRadio
- subscription service playing radio music via the internet |
| X |
CLICKTHEBUTTON |
CTB.EXE |
Price comparison based
spyware |
| N |
Client Access Check Version |
cwbckver.exe |
Part of IBM's
iSeries (nee As/400) Client Access - communications suite that allows
desktop, browser and wireless access to iSeries servers. Checks the software
version on your PC to that of the iSeries it is connected to. Not required -
and can be turned off in the Client Access properties. It's a waste of
resources |
| ? |
Client Access Express Welcome |
cwbwlwiz.exe |
Welcome wizard launcher - Part of IBM's
iSeries (nee As/400) Client Access - communications suite that allows
desktop, browser and wireless access to iSeries servers.
What does it do and is it required? |
| N |
Client Access Help Update |
cwbinhlp.exe |
Client Access Help Registry Update Function - part of IBM's
iSeries (nee As/400) Client Access - communications suite that allows
desktop, browser and wireless access to iSeries servers. It only updates the
help files on your PC to match the level of the attached iSeries |
| N |
Client
Access Service |
CwbSvStr.Exe |
Part of IBM's
iSeries (nee As/400) Client Access - communications suite that allows
desktop, browser and wireless access to iSeries servers. Useful if you are
going to access the iSeries through Windows Explorer to move files back and
forth between Windows folders and iSeries folders. This is a tool that is
only used by Client Access administrators (usually) so it is not required -
a waste of resources |
| ? |
Client agent for ARCserve |
W95AGENT.EXE |
Part of
Brightstor ARCserve Backup from Computer Associates.
What does it do and is it required? |
| X |
ClientMan1 |
mscman.exe |
Spyware/malware, included into the latest version of
Grokster, among others. According to research by SpyBot's PMK, "able to
trick ZoneAlarm, auto-clicking it to allow passing through the firewall!" |
| N |
Clik Status
Monitor |
toolsclickstat.exe |
Part of Iomega Tools to let you know whether an Iomega
PocketZip (nee Clik) removable drive cartridge is installed |
| N |
Clipbook Service |
Clipsrv.exe |
Supports Windows XP ClipBook Viewer, which allows pages to
be seen by remote ClipBooks |
| N |
ClipMate5x |
ClipMt5x.exe |
Clip
Mate 5.x by Thornsoft. Utility that allows you to store more than one
item in the clipboard. Available via Start -> Programs |
| N |
Clipmate6 |
CLIPMT60.EXE |
Clip Mate 6
by Thornsoft. Utility that allows you to store more than one item in the
clipboard. Available via Start -> Programs |
| N |
Clipomatic |
Clipomatic.exe |
Mike Lin's
Clipomatic
is a clipboard cache program - it remembers what was copied to the clipboard
even after new data is copied, and allows you to retrieve the old data |
| N |
Clipsrv |
Clipsrv.exe |
Supports Windows XP ClipBook Viewer, which allows pages to
be seen by remote ClipBooks |
| N |
ClipTrakker |
ClipTrakker.exe |
Cliptrakker - clipboard extender |
| U |
CLMFrontPanel |
clmpanel.exe |
System tray status/display/configuration utility for a
number of modems. Can be disabled by right-clicking on the tray icon. If
disabled, connection status is lost |
| ? |
clnwall |
rundll.exe setupx.dll, InstallHinfSection
..\delwall.inf |
?? |
| X |
ClockSync |
Sync.exe |
ClockSynck - synchronizes your system clock with an internet time
server. It's by WhenU, the makers of the Save Now spyware, and they're
usually seen in tandem, so it's advised to replace it with one of may
spyware free alternatives available |
| U |
ClockWise |
CLOCKWISE.EXE |
ClockWise
- produced by R J Software - a time utility. It is a schedueler not only for
dates, but you can choose it to run programs at any time. It also updates
the time by connecting to an atomic clock server. This is a spyware-free
alternative to ClockSync |
| N |
CloneCD
or
CloneCDTray |
CloneCDTray.exe |
System tray for
CloneCD -
the only useful option is "Hide CDR Media" only available via this tray |
| U |
CloneCDElbyCDFL |
ElbyCheck.exe |
From
Elaborate Bytes who make CloneCD - monitors the installed filters of
CD-ROMs/DVD-ROMs. Note - under Win2K removing this from startup causes the
CD drive in the computer to not be recognized in the OS and after rechecking
it prompts that the driver has been corrupted and asks you to restart the
computer to fix it |
| ? |
Cmaudio |
Rundll32 cmicnfg.cpl,
CMlCtrlWnd |
Control panel for C-Media based
soundcards - often included on popular motherboards with in-built audio? |
| X |
Cmd |
cmd32.exe |
Added as a result of the
P2P.TANKED VIRUS! |
| X |
CME |
cme.exe |
Part of
Gator advertising spyware - see
here
for removal instructions |
| U |
C-Media Echo
Control |
EchoCtrl.exe |
C-Media produce audio chipsets that are often found on
popular motherboards with on-board audio. You may need it if you use the
echo control feature of C-Media Mixer (below) |
| N |
C-Media Mixer |
Mixer.exe |
C-Media produce audio chipsets that are often found on
popular motherboards with on-board audio. Provides System Tray access to
change audio settings. Available via Start -> Settings -> Control Panel or
Start -> Programs |
| X |
CmeSYS |
CMEsys.exe |
Part of
Gator advertising spyware - see
here
for removal instructions |
| X |
CmeUPD |
CMEupd.exe |
Part of
Gator advertising spyware - see
here
for removal instructions |
| U |
CMPDPSRV |
CMPDPSRV.EXE |
Printer Driver Plus from ViewAhead Technology (formerly DeviceGuys,
Inc.). "Printer Driver Plus seamlessly integrates all the necessary
components of a printer driver, plus more." Installed with some Compaq and
Lexmark printers |
| X |
N/A |
CNBABE.EXE |
Appears to be spyware added by KAZAA (and maybe others)
that displays pop-up ads whilst you're browsing |
| X |
CnsMax |
Internat.exe |
Added as a result of the
POINTEX VIRUS! |
| X |
CnsMin |
Rundll32.exe CNSMIN.DLL, Rundll32 |
Appears as "Chinese Keywords" in the Add/Remove programs
box and symptoms are a whole list of rubbish URL's in your Internet Explorer
history. Clear history does not remove these. For more information see
here |
| N |
CnxDslTaskBar |
CnxDslTb.exe |
Connexant DSL Taskbar as used on Acess Runner and Samsung
AHT-E310 ADSL modems |
| U |
Codename
Dashboard |
dashboard.exe |
Codename: Dashboard - "an application that resides at the side of your
screen. Built on the Microsoft .NET Framework, it is a host for
interchangeable components through which C.D. allows you to have any
information you want, on your desktop, all the time" |
| X |
Coldlife -icmp |
Systray.exe |
Added as a result of the
FSERVE VIRUS! Note - this is not the real SysTray.exe |
| U |
coloreal |
coloreal.exe |
Makes colours sharper and brighter, but will only work with
coloreal capable monitors |
| N |
Colorific
Control Panel |
Hgcctl95.exe |
From E_Color. Colorific delivers accurate gamma and color
temperature across your entire system - monitor to printer and digital
camera to monitor |
| N |
COM-IP |
COMIP.EXE |
COM-IP Virtual Modem Driver (COM-IP Creates a Fake Serial
Port that allows you to use older DOS Based Communications Programs over
Telnet. Type atdt host.domain.com instead of atdt 5551212) |
| X |
ComcastSUPPORT |
tgkill.exe |
Comcast (the cable folks who are replacing @home in some
parts of the USA) have struck a deal with Tioga to provide an "enhanced"
support and self-repairing tool. This is "beta" at present and was made
available to download by mistake at present. Remove via Start -> Settings ->
Add/Remove Programs |
| X |
COMCFG |
comcfg.exe |
Added as a result of the
TOADCOM.A VIRUS! |
| X |
Command
(1) |
system.exe |
Added as a result of the
GATECRASH.A or
GATECRASH.B VIRUSES! |
| X |
Command
(2) |
Gotit.exe |
Added as a result of the
TITOG VIRUS! |
| N |
CommCtr |
commctr.exe |
"Net2Phone
CommCenter is the latest in Internet voice technology allowing you to
place calls easily all over the world right from your PC!". Available via
Start -> Programs |
| U |
Compaq Alerter |
CPQAlert.exe |
Compaq's Insight Manager Agent - a tool that allows for
"fault, performance, and configuration management". Recommended for
corporate users only. It's best removed if installed but not wanted, rather
than disabled at startup. See
here for more information |
| N |
Compaq Computer Corp
SCCenter Module |
SCCENTER.EXE |
For Compaq PC's. Part of Backweb |
| ? |
Compaq
Computer Security |
Rundll32.exe SECURE32.CPL, Service |
?? |
| N |
Compaq DMI |
cpqdmi.exe |
Compaq version of the Desktop Management Interface |
| ? |
CompaqHW
Comp Manager |
cpqhcm.exe |
Running on a Compaq laptop - any
ideas? |
| N |
Compaq
Internet Setup |
inetwizard.exe |
For Compaq PC's. Runs Compaq internet setup wizard and
offers you to signup from ISP list |
| U |
Compaq
Knowledge Center |
silent.exe & matcli.exe |
For Compaq PC's. "matcli.exe is a motive Assistant Command
line interface that gathers information about your system's identity like
your name email address, city, state, etc and gets written to a log file
while silent.exe executes matcli.exe quietly in the background. Compaq
Knowledge Center is required to run with the Help and Support program. If
you uncheck Compaq Knowledge Center and and then run help and Support it
will add another Compaq Knowledge Center in the startup menu. If you remove
the Compaq Knowledge Center in the add/remove program some help menus in
help and support will not be available like Fix my Presario, Preference, and
Contact Technical Support". You decide. |
| N |
Compaq
Message Server |
COMPAQ-RBA.EXE |
Applies to CPQBootPerfDB below as well. These files
generate some kind of server or servlet that attempts to connect with Compaq
online. They are like Trojans, but fairly harmless. They send information on
the "Compaq Advisor/Compaq Message Screener" application that comes with
every Compaq computer and provide feedback on how computer users use the
Message Advisor. These messages appear occasionally and instruct and advise
users on their computer and its use. They generally attempt to get you
(these messages) to connect to Compaq's website. They may be safely disabled
via (1) MSCONFIG or (2) Start -> Programs -> Compaq Advisor -> Advisor
Settings under the "advanced" tab. Not required and can cause problems |
| U |
Compaq PK Daemon |
cpqkl.exe |
For Compaq laptops for programming user configurable keys.
Not required unless you use them |
| N |
CompaqPrinTray |
printray.exe |
Puts printer icon in the System Tray. When this option is
disabled you will no longer be able to access the Control Program or Printer
Driver directly from your desktop |
| N |
CompaqSystray |
cpqpscp.exe |
Compaq System Tray icon |
| N |
Compaq
Video CD Watcher |
?? |
For Compaq PC's. MPEG viewer |
| X |
COM Service |
mscom32.com |
Added as a result of the
PLUX VIRUS! |
| N |
COMSMDEXE |
comsmd.exe |
3Com tray icon |
| X |
ComTry Web
Searcher |
wstray.exe |
Comtry MP3 Downloader related - spyware |
| ? |
Config Loadation |
iEEexplore.exe |
Likely to be an unidentified VIRUS as
it ensures it loads itself via 4 of the registry "Run" keys |
| X |
Config Loader
(1) |
svchosl.exe |
Added as a result of the
GAOBOT.P VIRUS! |
| X |
Config Loader
(2) |
sysldr32.exe |
Added as a result of the
GAOBOT VIRUS! |
| U |
ConfigSafe |
CFGSAFE.EXE
or
AUTOCHK.EXE |
ConfigSafe - lets you identify changes to the registry, INI files,
System asset files, system hardware, network connections, and operating
system versions -- provides a restore function. Your choice |
| N |
ConfigServices |
Config.exe |
Part of initial setup on a Compaq PC |
| X |
Configuration Loader (1) |
<filename>.exe |
Added as a result of the
LOADCFG or
SDBOT VIRUSES where <filename> can be random |
| X |
Configuration Loader (2) |
syscfg32.exe |
Added as a result of the
SDBOT.B VIRUS! |
| X |
Configuration
Manager |
CNFGLD32.EXE |
Added as a result of the
SDBOT VIRUS! |
| N |
Configuration
Utility |
CONFIG.EXE |
Controls linksys wireless connection. Available from the
Desktop |
| N |
Configuration
Wizard |
Cfgwiz32.exe |
Added as a result of a variation of the
HACKTACK VIRUS! Not to be confused with the valid MS "ISDN Configuration
Wizard" (Cfgwiz32.exe) in C:\Windows\System |
| N |
Conmgr |
conmgr.exe |
Starts Winfax pro at startup |
| U |
ConMgr.exe |
conmgr.exe |
Connection Manager as used by Earthlink and others. If you
need this to ensure a proper connection but don't want to connect at startup
try creating your own shortcut |
| X |
Connect2Party |
connect2party.exe |
Adult content dialler |
| ? |
Contacte |
contacte.exe |
Some kind of driver? |
| X |
ContentService |
winservn.exe |
Homepage hijacker |
| X |
ContinueInstall |
bpsinstall.exe |
BrowserAid parasite |
| N |
ControlCentreTray |
XWCTray.exe |
System Tray access for the Xerox ControlCentre 2.0 software
for their range of printers, copiers, faxes, etc |
| N |
Controller |
WFXCTL32.EXE |
From Symantec's TalkWorks Pro and WinFax. Appears if you
chose to have the program appear in the taskbar (System Tray) during
installation and displays a yellow fax/telephone icon. Available via Start
-> Programs |
| N |
control panel
(1) |
smctrlw.exe |
System Tray icon for a Silicon Motion LynxEM based PCI
Graphics Card |
| X |
Control Panel
(2) |
System.exe |
Added as a result of the
DANI VIRUS! |
| U |
Cookie Cop 2 |
CookieCop.exe |
Cookie Cop 2 from PC Magazine - cookie manager. Allows you to decide
which internet sites can add "cookies" related to their sites for the next
time you return |
| U |
CookieJar |
Cookiejar.exe |
Cookie
Jar cookie manager from Jason's Toolbox. Allows you to decide which
internet sites can add "cookies" related to their sites for the next time
you return |
| U |
Cookie Pal |
CPBRWTCH.EXE |
Kookaburra Softwares
Cookie Pal cookie manager. Allows you to decide which internet sites can
add "cookies" related to their sites for the next time you return |
| U |
CookiePatrol |
CookiePatrol.exe |
CookiePatrol -
PestPatrol's
cookie interceptor stopping spyware cookies |
| U |
CookieWall |
cookie.exe |
CookieWall from Analog X. Allows you to decide which internet sites can
add "cookies" related to their sites for the next time you return |
| U |
Cool Desk |
cdesk.exe |
Cool
Desk is a virtual desktops manager. "Ever you wished to have several
screens on your computer? Cool Desk creates up to 9 virtual desktops and
offers you to have different windows on each of them". Not required but may
be of use to you |
| N |
CoolSwitch |
taskswitch.exe |
ALT+TAB replacement Powertoy for Windows XP - enhances the
graphics displayed when you want to switch between programs running
full-screen |
| U |
CopernicPerUserTaskMgr |
CopernicPerUserTaskMgr.exe |
Automatic tasking feature of Copernic Pro multi-search
engine tool |
| N |
CorelCENTRAL 10 |
I_26dadCC.exe |
CorelCENTRAL 10 - personal information manager (PIM). Supplied as part
of Corel WordPerfect Office 2002. Available via Start -> Programs |
| N |
Corel Colleagues
& Contacts Reminders |
cffrem.exe |
Corel
Colleagues & Contracts - all-in-one organizer for scheduling meetings,
maintaining addresses, etc. Part of Corel Print Office |
| N |
Corel Desktop Application
Director |
dadx.exe |
The Desktop Application Director (DAD) gives you easy
access to all Corel applications - x represents ther version number.
Available via Start -> Programs |
| N |
Corel Family &
Friends reminders |
CFFREM.EXE |
Corel Family & Friends - all-in-one calender, address book and list
manager. Part of Corel Print House Magic |
| N |
CorelMedia FoldersIndexer8 |
MFindexer.exe
MFINDE~1.EXE |
Part of CorelDraw bundles for indexing media files -
similar to "fast find" in MS Office |
| N |
Corel
Registration |
Remind32.exe |
If you don't want to register Corel products and be
reminded about it every 2 weeks disable it |
| N |
Corel
Registration Reminder |
Remind32.exe |
If you don't want to register Corel products and be
reminded about it every 2 weeks disable it |
| X |
CoreSrv |
coresrv.exe |
Some IRC trojans/worms use this - see
here for more
information |
| ? |
CORESYS |
coresys.exe |
?? |
| N |
CorrectConnect |
CConnect.exe |
Broadband ISP diagnostic tool - as used by NTL and Cox
Communications. Shortcut available |
| N |
CountrySelection
or
Country Select |
pctptt.exe |
Country selection for a PCtel HSP56 based modem. Often
found in OEM (Dell,Compaq, HP, etc) systems for their modems included on the
motherboard or as a separate card. Once you've set the modem up to the
chosen country it's not required |
| X |
couponica |
couponica.exe |
Adware - see
here |
| ? |
Coupon Offers |
?? |
?? |
| U |
CP32NOT |
CP32BTN.EXE |
For the programmable "one-touch" buttons on HP laptops (and
others?). Safe to disable if you don't use these buttons |
| ? |
CPA9P2PSERVER |
CPA9P2PS.exe |
Found on a Compaq Presario but what
is it? |
| U |
CPBrWtch |
CPBrWtch.exe |
Kookaburra Softwares
Cookie Pal cookie manager. Allows you to decide which internet sites can
add "cookies" related to their sites for the next time you return |
| Y |
CPD_EXE |
CPD.EXE |
Firewall bundled with McAfee VirusScan 6.* |
| ? |
CPortPatch |
cppatch.exe |
CPortPatch is a utility is required
for Dell laptops that are using a docking station. Is it needed though? |
| Y |
CPQAcDc |
CPQAcDc.exe |
Compaq PowerCon power management software for laptops |
| U |
CPQAlert |
CPQAlert.exe |
Compaq's Insight Manager Agent - a tool that allows for
"fault, performance, and configuration management". Recommended for
corporate users only. It's best removed if installed but not wanted, rather
than disabled at startup. See
here for more information |
| N |
CPQBootPerfDB |
CPQBootPerfDB.EXE |
See Compaq Message Server above |
| Y |
CPQCalib |
CPQCalib.exe |
Compaq PowerCon power management software for laptops |
| N |
CPQDFWAG |
CpqDfwAg.exe |
For Compaq PC's. Runs Compaq diagnostics on every boot |
| U |
CPQEASYACC |
cpqeadm.exe |
For Compaq PC's. Allows the use of programmable keys on
mulimedia keyboards. Required if you use the additional keys |
| U |
cpqeaui |
cpqeaui.exe |
For Compaq PC's. Allows the use of programmable keys on
mulimedia keyboards. Required if you use the additional keys |
| U |
cpqek |
kcpqek.exe |
For Compaq PC's.
Easy Access button support for the keyboard |
| U |
CPQInet
Runtime Service |
CpqInet.exe |
For Compaq PC's. Allows AOL and Compuserve to use the
Easy Access buttons for the internet. Is not required if you don't use
the ISP providers |
| N |
CPQINKAGENT |
cpqinkag.exe |
That is the Compaq Ink Agent for some inkjet printers, it
lets users know when their ink cartridges are getting close to empty (by how
many pages they have printed) |
| U |
cpqns |
cpqnpcss.exe |
Related to Compaq.Net - not required if you don't use that |
| Y |
CPQSTUTFIX |
stutfix.exe |
For Compaq PC's. Fixes audio stutter problems for ESS
Maestro soundcards. You can download it
here.
This is a Compaq originated file and has been verified as free from viruses
by McAfree/Norton |
| U |
CPUcool |
Cpucool.exe |
Program to keep the processor cool when idle in
"overclocked" systems. Also available via Start -> Settings -> Control Panel |
| X |
cqlyg |
world_cup_.bat |
Added as a result of the
WCUP VIRUS! |
| ? |
CQSCP2PS |
?? |
"Compaq printer utility which is
required in the startup menu in order to make the printer work correctly".
Personally I doubt whether it is actually needed |
| ? |
CQSCP2P SERVER |
?? |
"Compaq printer utility which is
required in the startup menu in order to make the printer work correctly".
Personally I doubt whether it is actually needed |
| U |
cracked_windows1 |
cracked_windows1.exe |
Cracked Windows popup killer |
| N |
CrazyTalk Serve |
rundll32.exe CrazyTalk.dll, DIIServeMediaFile |
CrazyTalk from Reallusion - "the worlds only facial animation tool that
gives you the power to create talking animated images from a single
photograph, complete with emotions." Can apparently be installed without
your knowledge as well as being a legitimate download in it's own right from
sites such as TUCOWS |
| N |
CreateCD |
Createcd.exe |
Adaptec Easy CD Creator system tray application (pre
version 5). Available via Start -> Programs |
| N |
CreateCD50 |
Createcd50.exe |
Adaptec Easy CD Creator version 5 system tray application.
Available via Start -> Programs |
| N |
Creative AGP
Wizard |
agpwiz.exe |
Part of Creative's BlasterControl |
| N |
CreativeDiscNotifier |
CTNOTIFY.EXE |
For Creative Soundblaster Live! series soundcards. Detects
when you insert a CD-ROM, DVD-ROM, etc. Available via Start -> Settings ->
Control Panel |
| X |
Creative.exe |
Creative.exe |
Added as a result of the
PROLIN VIRUS! |
| N |
Creative Launcher |
CTLauncher.exe |
For Creative Soundblaster Live! series soundcards. Adds a
quick-launch bar to the top of the display and a System Tray icon. Available
via Start -> Programs |
| U |
CreativeMixer |
CTMIX32.EXE |
Creative soundcard System Tray access to, for example,
volume slider controls as normally provided by the "speaker" icon. Not
required unless you adjust any settings otherwise available via the standard
icon |
| N |
Creative PCI
Audio Configuration Utility |
starter.exe |
System Tray icon to configure a Creative Soundblaster PCI
soundcard. Not required and re-instates itself when un-checked. Try one of
the solutions on
this special page. Similar to EnsoniqMixer |
| N |
Creative Service for
CDROM Access |
Ctsvccda.exe |
Resident program for Creative's PlayCenter included with
Soundblaster Audigy sound cards - speeds up detection of some media CDs if
the system doesn't natively support them. Available via Start -> Programs |
| N |
CriticalUpdate |
Wucrtupd.exe |
MS Windows Critical Update Notification. If you want to
keep Windows up-to-date, check the Windows Update site |
| X |
cronos |
MARCO!.SCR |
Added as a result of the
OPASERV.G VIRUS! |
| ? |
Crystal 3D Audio Control |
CWD3DSND.EXE |
Crystal 3D Audio sound driver. Is it
required? |
| U |
CSINJECT.EXE |
CSINJECT.EXE |
Part of Quarterdeck/Norton CleanSweep. For a full
description see
here. An excerpt - "Csinject must be loaded in order for Smart Sweep to
automatically monitor installations and properly track registry changes." |
| U |
CSS_Central |
CSS_1631.EXE |
CSS Communication Agent (95 Host) from
Command Software Systems "CSS Central™ provides administrators with a
powerfully proactive tool to effectively manage and maintain the anti-virus
strategy from a centralized console." |
| X |
csss |
Csss.exe |
Added as a result of the
BALICK VIRUS! |
| Y |
ct |
ct.exe |
ct.exe is a file is for the HP Learning Adventure
software and if you use this software it is required to run it |
| N |
CTAVTray |
CTAvTray.exe |
For Creative Soundblaster Live! series soundcards. Plays
the EAX animation on start-up and adds a System Tray icon for it. Available
via AudioHQ |
| ? |
CTDVDDet |
CTDVDDet.exe |
Auto-detect and play a DVD when using
a Creative Soundblaster Audigy2 soundcard? |
| U |
ctfmon |
ctfmon.exe |
CTFMon is involved with the language/alternative input
services in Office XP. CTFMON.exe will continue to put itself back into
MSConfig when you run the Office XP apps as long as the Text Services and
Speech applets in the Control Panel are enabled. Not required if you don't
need these features. For more info on ctfmon see
here. CTFMON can be disabled from Control Panel, Text & Speech Services |
| N |
CTHELPER |
CTHELPER.EXE |
CTHELPER is a background task that
is a plug-in manager for Creative drivers. The theory is that 3rd party
manufacturers can use the CTHELPER plug-in interface to produce drivers,
add-on features, and fixes that will integrate with a tighter fit with
Creative’s sound drivers and utilities. Given its purpose CTHELPER would
normally be classified as a "leave alone" background task.Unfortunately
there are often problems with CTHELPER, most notably that it can use 100% of
CPU time so it's best left disabled |
| N |
CTRegRun |
CTRegRun.exe |
For Creative Soundblaster Live! series soundcards. Reminds
you to register your card with Creative |
| N |
CTStartup |
CTEaxSpl.exe |
Splash screen with sound on every boot up. Installed with a
Sound Blaster Audigy soundcard |
| U |
CTsysVol |
CTSYSVOL.exe |
Creative sound card volume controls |
| ? |
cttdpsrv |
cttdpsrv.exe |
?? |
| X |
cuo |
cuo.exe |
Added as a result of the
BUGBEAR VIRUS! |
| N |
CursorXP |
CursorXP.exe |
CursorXP from Stardock - tool for creating mouse cursors |
| N |
CuteMX |
CuteMX.EXE |
File sharing utility |
| Y |
CVPND |
cvpnd.exe |
Sub-system used by Cisco VPN client for making a connection
to a remote IPSec server |
| N |
cwbckver |
cwbckver.exe |
Part of IBM's
iSeries (nee As/400) Client Access - communications suite that allows
desktop, browser and wireless access to iSeries servers. Checks the software
version on your PC to that of the iSeries it is connected to. Not required -
and can be turned off in the Client Access properties. It's a waste of
resources |
| N |
cwbinhlp |
cwbinhlp.exe |
Client Access Help Registry Update Function - part of IBM's
iSeries (nee As/400) Client Access - communications suite that allows
desktop, browser and wireless access to iSeries servers. It only updates the
help files on your PC to match the level of the attached iSeries |
| N |
cwbsvstr |
cwbsvstr.exe |
Part of IBM's
iSeries (nee As/400) Client Access - communications suite that allows
desktop, browser and wireless access to iSeries servers. Useful if you are
going to access the iSeries through Windows Explorer to move files back and
forth between Windows folders and iSeries folders. This is a tool that is
only used by Client Access administrators (usually) so it is not required -
a waste of resources |
| ? |
cwbwlwiz |
cwbwlwiz.exe |
Welcome wizard launcher - Part of IBM's
iSeries (nee As/400) Client Access - communications suite that allows
desktop, browser and wireless access to iSeries servers.
What does it do and is it required? |
| ? |
Cwcdschk.exe |
Cwcdschk.exe |
IBM Thinkpad related? |
| N |
CXMon |
Hpi_Monitor.exe |
Autodetects when a HP camera is attached to the computer
and launches the "HP Photoimaging Software". Available via Start -> Programs |
| N |
Cyber |
cyberchk.exe |
Likely to be found in a directory called "Belkin" and pops
up a dialog box saying "It's time to Clean your Laser lens", with the window
title "PMC Laser Lens", referring the CD/CDRW/DVD drives.
If you find anything more please let me know |
| N |
CyberMedia Agent |
CMAGENT.EXE |
Part of CyberMedia's Oil Change program. Not normally
required. Note - if you have TextBridge, CyberMedia Agent may attach itself
to TextBridge and cause TextBridge to crash everything if this is disabled |
| U |
Cyber Trio |
showmode.exe |
From G-Tek Technologies. Allows you to set the PC in one of
three modes, Standard, Enhanced and Kiddo. Standard is full function,
Enhanced prevents accidental damage and Kiddo is a play environment for
kids. Pre-installed on some Packard Bell PCs |
| X |
CyberWolf |
CyberWolf.exe |
Added as a result of the
CYDOG.C VIRUS! |
| X |
CyDoor |
CD_Load.exe |
Adware. Check
here for
information about Cy-Door and
here
for a program that can remove it |
| N |
CyphTray |
CyphTray.exe |
Cypherus
- encryption software |

| |
Name/Startup Item |
Command |
Comments |
| N |
D066U Utility |
D066UUTY |
TWAIN driver for the CanoScan D660U flatbed scanner. Start
scanning via your scanner management software |
| U |
D4 |
D4.exe |
Dimension 4 - network time synchronization software |
| Y |
DadApp |
dadapp.exe |
"DadApp is the SW utility that controls the programmable
buttons on Dell Laptops. Not required, but should be left in because it can
create a hassle and doesn't always restore functionality to those buttons
once unchecked and rechecked" - direct from Dell |
| N |
DACONFIGEXE |
daconfig.exe |
3Com NIC Diagnostics. Available via Start -> Programs |
| N |
Daemon
(1) |
DAEMON32.EXE |
Pre-loads game profiles for MS Sidewinder game controllers
prior to release 2.0 of the software. Recommend upgrade. Available via Start
-> Programs |
| U |
Daemon
(2) |
Daemon.exe |
Daemon Tools
- used to map an image-file (.iso, .bin etc) to a virtual CD/DVD-drive |
| N |
Daily Planner |
dayplan.exe |
Daily Planner - discontinued, and now part of
KMCS Deluxe
System Suite. Tool to plan your days, and check activities off as you
complete them |
| N |
Dap |
DAP.exe |
Download
Accelerator Plus from SpeedBit - download manager/accelerator |
| ? |
DashIE |
N/A |
Could be related to "Dash Power
Shopping" tool bar in IE? |
| X |
Data789 |
Regedit.exe
....data789.tmp |
Homepage hijacker |
| N |
DataCaching |
FlashKsk.exe |
SmartMedia Card management from the installation of a SanDisk reader for
a camera's SmartMedia card and also adds the "Unplug and Eject Hardware"
System Tray icon |
| N |
Data LifeGuard |
BACKWE~1.EXE |
Data LifeGuard diagnostic tools for Western Digital's
series of hard drives |
| N |
DataViz Messenger |
DvzMsgr.exe |
DataViz Documents to Go - "allows you to use your Word, Excel and
PowerPoint files on your handheld anywhere, anytime. In addition, it now
synchronizes e-mail with attachments, PDF files, pictures and Excel-like
charts" |
| X |
Datcheck |
datcheck.exe |
Added as a result of the
KEYPANIC VIRUS! |
| ? |
Datechecker |
N/A |
Could be related to
this? |
| X |
DateMakerIntl |
DateMakerIntl.exe |
Premium rate dialler also referred to as the
PORNSPA.F VIRUS! |
| X |
Date Manager |
datemanager.exe |
Date
Manager - calender program. Spyware/adware based provided by The Gator
Corporation |
| ? |
DAupdate |
DAupdate.exe |
?? |
| ? |
DAW9532.exe |
DAW9532.EXE |
Loaded during installation of some 3Com network cards.
Enables their DynamicAccess desktop management software.
Is it required? |
| U |
DayToday |
DAYTODAY.EXE |
DayToday from RoboMagic Software Corp. Displays the date on the taskbar |
| N |
?? |
dbserv.exe |
Database Server for Norton Ghost on Win2k Pro. Ghost works
fine when it is disabled |
| N |
DCfssvc |
dcfssvc.exe |
Associated with digital cameras and known to cause problems
which disappear if disabled. If this program is unchecked in startup, your
camera will not cause your computer to open a pop-up window when you connect
it. It is even money if you will be able to read the files off the camera
without this |
| X |
DDCActiveMenu |
DDCActiveMenu.exe |
As below |
| X |
DDCM
or
DDCMan |
DDCMan.exe |
Digital
Distribution Channel from Wild Tangent - adware |
| X |
ddeproc |
ddeproc.exe |
Associated with Webcelerator - spyware. Read
eAcceleration's privacy statement
here |
| ? |
DDT |
N/A |
?? |
| N |
DeadAIM |
rundll32.exe DeadAIM.ocm",
ExportedCheckODLs |
DeadAIM
- feature enhancing product for AOL's Instant Messenger program |
| X |
Debug |
DebugW32.exe |
Added as a result of the
GUBED VIRUS! |
| X |
Default web
browser |
IexpIore.exe |
Added as a result of the
OBLIVION.B VIRUS! Note - don not confuse "IexpIore.exe" with
"iexplore.exe" (Internet Explorer), the first has a captial "i" in place of
lower case "L" |
| U |
defwatch |
defwatch.exe |
Detects out-of-date virus definitions for Norton Anti-Virus
Corporate Edition and runs the Defwatch Wizard. Only required if you don't
update the virus definitions manually on a regular basis |
| U |
Delay
or
Delayrun |
delayrun.exe |
On HP PCs this program is used to help prevent conflicts or
timing issues on fast computers |
| N |
Dell Alert |
DAMon.exe |
"Dell Alert" utility, that's supposed to make interaction
with Support easier |
| ? |
DellDMI |
delldmi.exe |
Possibly part of
Dell OpenManage Client Instrumentation - software that allows remote
management application programs to access information about, monitor the
status of or change the state of the client computer, such as shutting it
down remotely. Uses the DMI and/or common information model (CIM) protocols,
which are systems management protocols defined by industry standards? |
| U |
DELLMMKB
or
DellTouch |
DELLMMKB.EXE |
Multimedia keyboard control for Dell based PCs - only
required if you use the multimedia keys |
| N |
DellSC |
dellsc.exe |
Dell Solution Center - web-based troubleshooting tools and
educational offerings |
| ? |
DelTmp |
DelTemp.exe |
Added to the startup list after installing a
Creative SoundBlaster Audigy soundcard.
Deletes temporary files once an installation is
complete? |
| N |
DeltTray |
deltray.exe |
System Tray access to the control panel for the M-Audio
Delta 44 PCI Analog Recording Interface. Available via a desktop
shortcut, Start -> Programs or Start -> Settings -> Control Panel |
| ? |
demon |
demon.exe |
?? |
| U |
DepFrez |
frzstate.exe |
Deep Freeze from Hyper Technologies. "Freezes" the current software
configuration so that an a re-boot all changes made refer back to their
original settings. Not required for most users - more likely to be used by
system administrators, for example |
| ? |
Description of Shortcuts |
*.exe |
* seems to be a sequence of
alphanumerics that can be different, i.e., 1960F8A9, 4EBD23F5, etc. Each of
these files would appear to be a shortcut, i.e., 4EBD23F5 is actually Works
Calender Reminder (found via a registry search) |
| X |
Desire |
desires.exe |
Adult content dialler |
| N |
DeskColor |
DESKCOLOR.EXE |
Provides transparent icon text backgrounds and coloured
icon text |
| N |
Deskflag |
Deskflag.exe |
DeskFlag
- animated USA flag on the desktop |
| U |
Desksite CMA |
cma.exe |
Desksie CMA siftware - "retrieves new content from the Desksite Data
Center" |
| N |
Desktop Architect |
DATRAY.EXE |
Desktop theme manager available
here - for managing the desktop appearance, fonts, sounds, etc |
| N |
desktopmgr |
desktopmgr.exe |
Synchronisation manager for the cradles for the
Research
In Motion range of wireless handhelds, including the "Blackberry" |
| N |
Desktop Plant |
AZARE10S.PLT |
Vritual plant from
here
- this version is an Azalea, there are others so the filename may be
different |
| ? |
desk-top-service |
desk-top-service.exe |
?? |
| N |
Desktop Weather |
THE WEATHER CHANNEL.exe |
Desktop Weather by The Weather Channel - provides current temperature,
conditions, alerts, etc |
| U |
DesktopX |
DESKTOPX.EXE |
A program that replaces the regular Desktop and Taskbar,
and can be changed to the user's liking |
| N |
deskup |
deskup.exe |
Adds Iomega Zip drive icons to the desktop |
| U |
detect
(1) |
idetect.exe |
iNTERNET
Turbo from Clasys Ltd. "It accelerates any Windows 95/98/Me/NT/2000/XP
internet connection in seconds". If you find it helps your connectivity
leave it enabled |
| ? |
detect
(2) |
turbodetect.exe |
?? |
| N |
Detector |
detector.exe |
USB port detector for LG scanners. Sits in the System Tray,
and when it detects the scanner through the USB port, you can run the
scanner software from the tray. It is not required at all, since you can use
the scan software from almost any photo editing software |
| U |
DEventAgent |
eventagt.exe |
DEvent Agent Module client - part of Dell OpenManage and
used for server management. Only required if you use this |
| U |
devldr16 |
devldr16.exe |
Associated with some Creative Labs sound cards. Provides
audio support for DOS applications. Not needed if you don't have those.
Required if you use "Sound Play Control" and "Sound Recorder". To disable:
(1) Disable via MSCONFIG (2) Start -> Settings -> Control Panel -> System ->
Device Manager then disable "Creative SB16 Emulation" under Creative
Miscellaneous Devices |
| ? |
Devlog |
?? |
?? |
| N |
diagent |
diagent.exe |
System Tray access for Creative Diagnostics for the
Creative SoundBlaster series soundcards. Available via Start -> Programs |
| X |
Dialer |
rundll32.exe msa32chk.dll |
Unidentfied malware |
| N |
Dialog Box
Assistant |
OSDEx.exe |
Dialog Box
Assistant from Duality Software. Helps with the standard Open and Save
As dialog boxes by showing recently used files and folders |
| N |
Dialog Helper |
PDDLGHLP.EXE |
Dialog Helper from
PowerDesk Pro by Ontrack.
Helps with the standard Open and Save As dialog boxes by showing recently
used files and folders. Available via Start -> Programs |
| N |
DigiGuide |
CLIENT.EXE
or
client01.exe |
TV guide and reminder |
| N |
Digital Dashboard |
devgulp.exe |
For Compaq PC's. Loads Digital Dashboard options |
| N |
Digital Line
Detect |
DLG.exe |
Detects whether your are plugged into a digital telephone
line and displays the information graphically. Installed by Dell (and maybe
others) and is included with all Connexant V.92 and Broadcom modems |
| N |
Digital River
eBot |
downlo~1.exe |
Digital River Systems EBOT for downloading software from
their site. In some cases, if you purchase software online for a download
from a software manufacturer, you will be sent to this online company's site
for the download after the purchase is complete. Read more
here |
| N |
DigitalWizard |
ISWizard.exe |
InstallShield's DigitalWizard - free, complete Digital
Content Management Solution that makes it easy to experience digital content |
| N |
DigitalWizard
Monitor |
dwMon.exe |
InstallShield's DigitalWizard - free, complete Digital
Content Management Solution that makes it easy to experience digital content |
| N |
DIGStream |
digstream.exe |
DIGStream Cache Manager - part of
ESPN
Motion that periodically checks for new videos periodically, downloading
them in the background is available. Starting ESPN Motion starts digstream
automatically |
| U |
Dimension4 |
d4.exe |
Atomic clock synchronisation freeware - starts-up, adjusts
the system clock, then shuts down |
| X |
Dino3 |
dino3.exe |
Related to Jurassic Park III and enables a dinosaur to walk
across the screen. Also generates adverts and classified as adware as a
result |
| N |
DirectCD |
DirectCD.exe |
DirectCD primarily allows you to drag and drop files onto a
suitably formatted CD-RW disc. Unless you use this on a frequent basis it
isn't required and is available via Start -> Programs. Start the program
before inserting a DirectCD formatted CD-RW in the drive. A re-boot is
recommended if you close Adaptec DirectCD before re-opening it again later |
| U |
Direct Update |
DUControl.exe |
DirectUpdate dynamic DNS updater |
| U |
DIRECTVDSL |
Directvdsl.exe |
Starts DirectTV DSL modem at boot up. Can also be started
manually |
| X |
DirectX |
ddhelp32.exe |
Added as a result of the
BIONET.318 VIRUS! Note - not the DirectX helper which is ddhelp.exe |
| X |
DirectX64 |
DirectXset.exe |
Added as a result of the
BROWNEY.A VIRUS! |
| U |
Dirkey |
Dirkey.exe |
Dirkey - small utility that allows you to bookmark up to 9 folders by
using the Ctrl+Alt+1..9 shortcut keys in an Open/Save File dialog or in
Windows Explorer. After this the Ctrl+1..9 shortcut keys can be used in the
same or another window to go to any of the 9 bookmarked folders |
| N |
Disc Detector
(1) |
CtNotify.exe |
For Creative sound cards. Detects when you insert a CD,
DVD, etc |
| ? |
disc detector
(2) |
qnetquestnotifty.exe |
?? |
| ? |
discoveg |
discoveg.exe |
?? |
| N |
DiscoverDeskshop |
Deskshop.exe |
Discover Deskshop - single use "virtual" credit card |
| ? |
DISKMON.EXE |
DISKMON.EXE |
?? |
| N |
Disknag |
disknag.exe |
Dell program that reminds you to make your backup
diskettes |
| N |
DisplayTrayIcon |
TrayIcon.exe |
System Tray access to display properties for ABIT graphics
cards. Unless you change your desktop resolution, etc regularily use Control
Panel -> Display |
| N |
Distiller Assistant 3.01 |
DISTASST.EXE |
From Adobe. Creates PDF universal files for Acrobat Reader.
Available via Start -> Programs |
| U |
distributed.net client |
DNETC.EXE |
Dsitributed computing projects client from
Distributed.net where
numerous computers are used to share a projects workload - similar to
SETI@Home and Folding@Home. Also prone to being distributed by
viruses |
| Y |
Dit |
dit.exe |
"Drive Icon and Label Utility" - assigns drive icons and
names to flash memory cards. Required, otherwise the drives aren't found |
| N |
DiTask.exe |
DiTask.exe |
Associated with an
Eicon
Networks ISDN or ADSL modem. System Tray icon which shows you the status
of your lines (free, occupied with incoming or outgoing call). Available via
Start -> Programs |
| N |
DJREGFIX |
regedit /s c:\hp\djregfix.reg |
DJRegFix showed up first in WinME as a "clever" way to
ensure that all Hewlett-Packard DeskJet printers actually worked with WinME
- since most were having major problems. This "utility" adds the
functionality and compatibility HP forgot to add in its WinME drivers |
| U |
DkService |
DkService.exe |
From Executive Software's Diskeeper defragmenting utility -
a replacement for Windows ScanDisk. Used to schedule defragmenting on a
regular basis and not required if you do so manually on a regular basis |
| Y |
dla |
tfswctrl.exe |
Drive letter access to HP's and Veritas' version of
DirectCD. Does the same thing as DirectCD. From HP - "This is a needed file
as it controles the readability of the Combo drives. Without this file
loading the end user will be able to burn CD's but wont be able to read
them. The drive itself will be able to read store bought master Cd's without
the file but not burnt ones" |
| N |
DlaTray |
Dlatray.exe |
On HP PCs, tray icon for dla above |
| X |
dlder |
dlder.exe |
Advertising spyware. Considered to be one oft the worst -
even creating a fake "explorer.exe" file. Can be installed via versions of
"Grokster", "Lime Wire" and "KaZaA" amongst other file-sharing utilities
(see
here). Reported in the past as a virus |
| N |
DLF_00000B00 |
Vcdlf.exe |
Known to cause problems with "Out of memory" errors (see
here). Otherwise, it's purpose is unknown |
| ? |
DLForcerExe |
DLForcerEXE.exe |
?? |
| N |
DLHelperEXE |
WATCH.exe |
Download helper distributed with some software that allows
the software installation to redirect download locations. Not required once
the installation is finished |
| N |
D-Link AirPlus DWL-650+
Utility |
WLANMON.exe |
D-Link Air Plus Wireless PC modem connection monitor |
| X |
DLL32 |
dllmem32.exe |
Added as a result of the
KWBOT.E VIRUS! |
| ? |
DLT |
dlt.exe |
?? |
| ? |
dluca |
dluca.exe |
?? |
| N |
DMILDR |
dmildr.exe |
Part of
Dell OpenManage Client Instrumentation - software that allows remote
management application programs to access information about, monitor the
status of or change the state of the client computer, such as shutting it
down remotely. Uses the DMI and/or common information model (CIM) protocols,
which are systems management protocols defined by industry standards.
Available via Start -> Programs |
| N |
DMISL |
DMISL.EXE |
DMI (Desktop Management Interface) Service Layer for Intel
TokenExpress network card software. DMI support for the Intel network card
managed through the Desktop Management Interface. See
here for more information |
| N |
DMISLAPP |
DMISLAPP.exe |
DMI similar to above |
| X |
Dnar |
Dnar.exe |
Unknown, except that it is not necessary. Tends to phone
home a lot. DMI related - see
here |
| Y |
DNE Binding
Watchdog |
rundll dnes.dll, DnDneCheckBindings |
Deterministic NDIS Extender (DNE). DNE is an NDIS-compliant
module which appears to be a network device driver to all protocol stacks
and a protocol driver to all network device drivers. Part of Gilat
Communications internet satellite systems. Required if you have this system.
Also installed by Winproxy - a proxy program for sharing internet
connections through one computer. Required if you want it to work |
| Y |
DNE DUN Watchdog |
rundll dnes.dll, DnDneCheckDUN13 |
Deterministic NDIS Extender (DNE). DNE is an NDIS-compliant
module which appears to be a network device driver to all protocol stacks
and a protocol driver to all network device drivers. Part of Gilat
Communications internet satellite systems. Required if you have this system.
Also installed by Winproxy - a proxy program for sharing internet
connections through one computer. Required if you want it to work |
| ? |
DNS2GoClient |
dns2goclient.exe |
DNS2Go is a Domain Name System that will make your computer accessible
anytime, anywhere by associating a domain name of your choice to your
currently assigned IP address. Is it required? |
| X |
DocTor |
Doctor.exe |
Added as a result of the
DOTOR VIRUS! |
| N |
DocuMagix Init |
PWATCH.EXE |
PaperMaster is an application for the PC designed to automate the
process of organizing, archiving, and retrieving digital versions of files.
Start manually if needed |
| ? |
Doing |
doing.exe |
?? |
| U |
Don't Panic |
dontpanicdemodp.exe |
30-day trial version of
Don't
Panic privacy software from Panicware. "Clean up Internet tracks and
quickly hide personal documents with this privacy suite." |
| U |
Don't Panic Pop-Up Stopper
or
dpps2 |
dpps2.exe |
Pop-Up Stopper Companion from Panicware. Pop-up blocker integrated into
the IE toolbar. Note that the Pro version doesn't load in startup as it is
installed as an Internet Explorer toolbar. Can cause problems with IE if you
use WinXP and uninstall Service Pack 1. Uninstalling the software leaves it
in the startup group |
| ? |
Dosbat |
?? |
?? |
| N |
Download Accelerator Plus 5.0 |
DAP.exe |
Download
Accelerator Plus from Speedbit. Download manager for resuming downloads,
amongst other features. Available via Start -> Programs. Note that the free
version is "adware" based |
| X |
DownloadWare |
dw.exe |
DownloadWare - executes arbitrary code from advertisers and not
considered to be adware but is a security risk. If a network connection is available it will connect to its
servers, which can direct it to download and install software from
advertisers. Installed along with programs such as MovieNetworks, Medialoads
and PAgent |
| N |
Download Wonder |
DownloadWonder.exe |
Download
Wonder from Forty Software. Download manager for resuming downloads,
amongst other features |
| N |
DPAgnt |
DPAgnt.exe |
digitalPersona fingerprint scanner |
| Y |
Dpcnav |
dpcnav.exe |
DirecWay from DirectTV satellite based high-speed internet access |
| Y |
DPCProxyLoadOnStartup |
dpcstart.exe |
DirecWay from DirectTV satellite based high-speed internet access |
| Y |
Dpcstart |
dpcstart.exe |
DirecWay from DirectTV satellite based high-speed internet access. Proxy
software |
| ? |
DragDrop |
DragDrop.exe |
?? |
| N |
Drag'n'Drop_Autolaunch |
Autolaunch.exe |
Iomega HotBurn - CD-RW burning software |
| ? |
dregfix |
ph_finder.exe |
?? |
| N |
DriveLED |
OODLed.exe |
O&O
DriveLED - displays your HDD LED on your monitor. Start manually |
| X |
Driver32 |
Scam32.exe |
Added as a result of the
SIRCAM VIRUS! |
| N |
DriveSelect |
driveselect.exe |
DVD X Copy XPress by 321 Studios. Creates a pop-up at
Windows startup that asks for the DVD drive to be selected. Available via
Start -> Programs |
| U |
dRMON SmartAgent |
SmartAgt.exe |
Part of the network monitoring program group for 3Com NIC
cards. See
here for more info |
| X |
drmu |
W95Mm.exe |
Homepage hijacker installing a toolbar: http://tdko.com/.
Lop.com in disguise. See this
thread |
| N |
drvlsnr |
drvlsnr.exe |
Compaq/ADI SoundMAX integrated digital audio controller
related |
| X |
dsa |
dsa.exe |
Homepage hijacker - redirecting to downseek.com |
| U |
DS Clock |
dsclock.exe |
Digital desktop clock including synchronization with atomic
servers - see
here |
| N |
DSentry |
DSentry.exe |
Anti-spyware from Dell. Seems that after Dell found out
certain applications being installed from DVD's would report back
information about what customers were watching, they decided to implement an
anti-spyware service. Run manually before installation starts |
| Y |
DSLagentexe |
DSLagent.exe |
Used in conjunction with USB connected ADSL modems from
Eicon
Networks (as used by BT for its Broadband internet service for example).
Required for a permanent ADSL connection |
| N |
DSL Monitor |
spdstrm.exe |
Comes with Efficient Networks DSL Modems. Little
red/green/yellow flashing icon in system tray |
| X |
DSS |
dssagent.exe |
DSSAgent by Brøderbund - spyware. Sends encrypted emails
about the system back to the originators of the program. Also a resource
hog. See here for
more info |
| ? |
DSSSGENS |
dssagens.exe |
?? |
| N |
DU Meter |
DUMETER.EXE |
Hagel Technologies internet bandwidth monitor |
| N |
dumprep 0 -k
or
dumprep 0 -u |
dumprep 0 -k
dumprep 0 -u |
Used in connection with memory dumps - you can disable
these by - right clicking on My Computer, selecting Properties and then the
Advanced tab. Click on the Settings button in 'Startup and Recovery'. In the
bottom pane - under 'Write debugging information' - click on the down arrow
and then select 'None' - OK your way out |
| U |
DVDBitSet |
DVDBitSet.exe |
DVD+RW Drive/Disc Compatibility Setting. Installed with HP
DVD+RW drives to enhance compatibility with existing readers. You can also
set a DVD+RW default drive write mode which is always used |
| N |
DVDSentry |
DSentry.exe |
Anti-spyware from Dell. Seems that after Dell found out
certain applications being installed from DVD's would report back
information about what customers were watching, they decided to implement an
anti-spyware service. Run manually before installation starts |
| Y |
Dvp95 |
Dvp95.exe |
Scan engine for
F-Secure
and Command antivirus software based on the
F-Prot AntiVirus engine |
| ? |
dvpapi9x |
DVPAPI9X.exe |
Part of Command AntiVirus for Windows
95/98/Me. Is it needed? |
| U |
DVSync |
dvsync.exe |
DVSync is the program that allows you to synchronize your
daVinci’s PDA's data with your Personal Information Manager on the PC |
| X |
dw |
dw.exe |
DownloadWare - executes arbitrary code from advertisers and not
considered to be adware but is a security risk (see
here). If a network connection is available it will connect to its
servers, which can direct it to download and install software from
advertisers. Installed along with programs such as
MovieNetworks, Medialoads and
PAgent |
| N |
DwlClient |
support.exe |
Dell realted. Not required but what
does it do? |
| ? |
DXDllRegExe |
dxdllreg.exe |
Appears to be a MS patch that
reregisters some of the DirectX DPlay DLL's? |
| X |
DxLoad |
DX3DRndr.exe |
Added as a result of the
GIBE.B VIRUS! |
| N |
DXM6Patch_981116 |
p_981116.exe |
Win32 cabinet self extractor. More info
here |
| X |
DyFuCA |
optimize.exe |
Adult content dialler - see
here |
| X |
DyFuCA Active
Alert |
actalert.exe |
Adult content dialler - see
here |
| ? |
DZKillMe |
DZSAVEME.EXE |
?? |

| |
Name/Startup Item |
Command |
Comments |
| N |
E6TaskPanel |
TaskPanl.exe |
Earthlink Task Panel - part of
Earthlink
TotalAccess 2003 internet access software. Quick access to internet,
E-mail and web-space |
| U |
eabconfg.cpl |
EabServr.exe |
Easy Access Buttons control panel on Compaq laptops. Only
required if you use the extra keys |
| X |
Eac_Cnry |
canary.exe |
Added as a result of the
CANARY VIRUS! |
| X |
Eac Download |
download.exe |
Associated with Webcelerator -
spyware. Read eAcceleration's privacy statement
here |
| U |
EACLEAN |
eaclean.exe |
For Compaq PC's.
Easy Access button support for the keyboard |
| ? |
Eac_rnvdl |
ANTIVIRUS_INSTALL.EXE |
?? |
| X |
EanthologyApp |
EANTHO~1.EXE |
Stop-Sign from eAccelerration. Detects spyware, malware, viruses and
keyloggers and stops popups. Spyware itself - read their privacy statement
here |
| N |
Eapcisetup
(1) |
sbsetup.exe |
Rockwell RipTide soundcard application software. Sound
works without it |
| N |
EAPCISETUP
(2) |
wizard.exe |
Part of the Creative Sounblaster PIC Installation Wizard.
Probably left as a result of a failed installation |
| N |
EarthLink
ToolBar 5.0 |
etoolbar.exe |
EarthLink Toolbar is a tool to help you get to all of the
resources of the internet. EarthLink 5.0 Setup adds a few basic buttons to
the Toolbar, but you can delete these or add more buttons any time |
| U |
EasyKey or
Easy Key |
easykey.exe |
For programming of the built-in functions keys on some
laptops (and maybe desktops). Required if these are used |
| X |
easyServ |
Server.exe |
Added as a result of the
EASYSERV VIRUS! |
| N |
Easy Start
Button |
esb.exe |
Provides functionality on certain laptops that have
additional keys. Not required unless you use the extra keys |
| U |
EasySync Pro |
XCPCMenu.exe |
EasySync Pro is a Lotus program for synchronizing a PDA with Lotus Notes |
| U |
EasyTuneIII |
EasyTune.exe |
Tuning (overclocking) utility for Gigabyte motherboards.
Shortcut available |
| U |
EasyTuneIV |
ET4Tray.exe |
Tuning (overclocking) utility for Gigabyte motherboards.
Shortcut available |
| N |
EbatesMoeMoneyMaker |
wjview ...Code |
Ebates is a website that provides discounts from purchases from many
websites. Discounts are automatic if on the Ebates listing. Discounts are
paid in cash quarterly |
| X |
eBay Toolbar |
EBAYTBAR.EXE |
eBay Toolbar
- reportes as spyware as it "phones home" |
| U |
eBoard
or
eMachines eBoard |
Eboard.exe |
eMachines multimedia keyboard manager. Required if you use
the extra keys |
| N |
eBot |
DownloadWizard.exe |
eBot from Digital River - "helps ensure your computer always has the
latest technology, fixes, add-ons, upgrades and 'cool stuff'." Can
optionally be installed with software such as Net Nanny internet filtering
software. Available via Start -> Programs |
| N |
EDLoader |
DTLoader.exe |
Effective Desktop from MiniStars Software - desktop
management software no longer being supported |
| N |
eFax.com Tray
Menu |
HotTray.exe |
eFax Messenger Tray Menu system tray icon for eFax
Messenger Plus. Available via Start -> Programs. Disabling instructions
available here |
| U |
Efpap.exe |
Efpap.exe |
Easy
File & Folder Protector. Deny access to certain files and folders, or to
hide them securely from viewing and searching |
| ? |
ehTray |
ehtray.exe |
eHome
Media Center PC related - what does it do and is it required? |
| U |
Eicon
NetworksLAN_DAEMON
or
Eicon TechnologyLAN_DAEMON |
watch.exe |
Associated with an
Eicon
Networks ISDN or ADSL modem. Watch protocols your connection with
numbers and duration. You need callvu.exe (from Start Menu) to see your
connection statistics. You can manually start watch.exe before you go
online. Needs diinfo.exe (started by DiTask) to work
correctly which can be started manually |
| X |
eixfi |
china.bat |
Added as a result of the
WCUP VIRUS! |
| U |
Elbycheck |
ElbyCheck.exe |
From
Elaborate Bytes who make CloneCD - monitors the installed filters of
CD-ROMs/DVD-ROMs. Note - under Win2K removing this from startup causes the
CD drive in the computer to not be recognized in the OS and after rechecking
it prompts that the driver has been corrupted and asks you to restart the
computer to fix it |
| X |
Element |
Element.txt |
Added as a result of the
ELEM VIRUS! |
| N |
elm |
Elmenv.exe |
ViaTech eLicense for securing, distributing and selling
music online |
| Y |
ElsaCapiCtl |
Rcapi.exe |
Assumed to stand for Remote Common Application Programming
Interface (RCAPI), this was installed with an Elsa Microlink ISDN modem. If
it is not there you can not bring up the dialog box which is sometimes
needed to reset the modem |
| ? |
EMA.exe |
EMA.EXE |
?? |
| X |
eMailEncryption |
VELOZSYS.EXE |
eAcceleration Stop-Sign related - foistware. Read their
privacy statement
here |
| U |
EM_EXEC |
EM_EXEC.EXE |
Logitech Mouseware driver. Needed to support some
additional functionality of Logitech mice/trackballs such as "SmartMove". If
you disable it and find you don't need it leave it disabled |
| N |
EN4060C Taskbar |
en4060ct.exe |
Comes with Efficient Networks DSL Modems. Little
red/green/yellow flashing icon in system tray |
| ? |
encapsulated command tool |
wintr.com |
?? |
| ? |
enaobvab |
enaobvab.exe |
?? |
| N |
Encarta Dictionary Quickshelf |
QSHLFED.EXE |
Provides quick access to Encarta's
Dictionary features? |
| N |
ENCMONITOR |
monitor.exe |
The Encompass Monitor. This program is the Connect Direct
Program. It is more trouble than it is worth and few use it |
| N |
Encoder Agent |
WMENCAGT.EXE |
MS Windows Media Encoder, which already has a shortcut
in the Start Menu if installed |
| U |
Encompass_ENCMONTR |
ENCMONTR.EXE |
Optional simple browser from Yahoo (Encompass) |
| U |
EnsoniqMixer |
starter.exe |
Puts the Ensoniq mixer in system tray. From Ensoniq
Technologies "Our mixer is a critical part of the soundcard as it fixes
sound problems and replaces the MS mixer which can no longer be used". If
you find you don't need it - try one of the solutions on
this special page. Similar to Creative PCI Audio Configuration Utility |
| X |
Enumerate Service |
wsys.exe |
Added as a result of the
MANIFEST VIRUS! |
| U |
eonemng |
eOneMng.exe |
eOne Manager, provides access to the buttons on the
keyboard and on the front of the console for the eMachines eOne PC |
| U |
ePrompter |
ePrompter.exe |
ePrompter - E-mail notification software |
| N |
EPSON
Background Monitor |
STMS.EXE |
Supposed to keep an Epson printer ready for quick
printing. Users report little difference whether it is on or not |
| U |
EPSON CardMonitor |
EPSON CardMonitor1.0.exe |
Monitors the PCMCIA memory card slot on EPSON cameras and
printers and launches PhotoStarter or PhotoPrint |
| U |
EpsonPhotoStarter |
EPSON_PhotoStarter.exe |
Only needed if you want to make full use of the
capabilities of an Epson printer that included this |
| N |
EPSON Status
Monitor 3 Environment Check |
e_srcv03.exe |
According to the Epson info: "Use this utility to
automatically check for errors and also check the level of ink remaining."
This utility can also be started on demand when about to print as follows:
File menu > Print to bring up the print dialog box. Click on the Properties
button which will bring up a display with 4 tabs. Click the Utility tab to
get a list of utilities that can be executed including the Status Monitor 3
Environment Check |
| U |
Epson
Stylus C62 Series |
E-S0BIC1.EXE |
Required for an interface to some versions of MS Word to
ensure that some fonts are printed correctly. Start it manually if required |
| U |
Epson
Stylus C82 Series |
e_s0hic1.EXE |
Required for an interface to some versions of MS Word to
ensure that some fonts are printed correctly. Start it manually if required |
| ? |
Equipmen |
Equipmen.exe |
?? |
| N |
EReg |
reg32.exe |
EReg is a software registration tool incorporated on
products such as those by Brøderbund, Connectix, Hewlett-Packard, The
Learning Company, and Sierra. Needless to say you don't need it |
| ? |
erm |
erm.exe |
?? |
| X |
eros.exe |
eros.exe |
Adult content dailler |
| Y |
eSafe Protect |
ESPWatch.exe |
eSafe
from Aladdin - internet security for gateway and E-mail servers |
| ? |
ESS Daemon |
Essd.exe |
Related to an ESS based soundacard.
Is it required? |
| Y |
Essdc |
essdc.exe |
Related to an ESS Solo soundcard. Seems as though it's
required |
| ? |
ESSNDSYS |
ESSNDSYS.EXE |
Related to an ESS based soundacard.
Is it required? |
| Y |
ESSOLO |
ESSOLO.exe |
Sound card driver that re-instates itself every time it's
removed |
| Y |
esspk |
esspk.exe |
ESS Technology modem speaker driver file. Required to get
on-line with this modem |
| N |
Ethernet |
tcaudiag.exe |
3Com NIC Installation/Diagnostic MFC application.
Diagnostics may be run from the Start -> Programs |
| X |
Etraffic |
JavaRun.exe |
Marketing software from
TopMoxie |
| Y |
eTrustCIPE |
ezdsmain.exe |
eTrust EZ Deskshield from Computer Associates. Protects against
malicious email attachments and unauthorized use of email by detecting and
blocking unusual behavior |
| Y |
eTrust EZ
Firewall |
efpeadm.exe |
eTrust EZ Firewall |
| U |
EVENTLISTENER |
EvLstnr.exe |
Used with a Nikon digital camera to recognize when the
camera is plugged in |
| N |
eventmgr |
eventmgr.exe |
Used with a Microtek scanner. Manages the scanner's button
events. Available via Start -> Programs |
| N |
Event
Planner Reminders |
PLNRnote.exe |
Sierra Event Planner tray icon |
| N |
Event Reminder |
pmremind.exe |
A calendar/alarm program that installs with Brøderbund
Printmaster |
| N |
Evidence
Eliminator |
ee.exe |
Evidence Eliminator - cover the tracks of your browsing habits and
E-mails if you think you need to. Run manually on a regular basis |
| N |
evntsvc |
evntsc.exe |
Application Scheduler installed along with
RealOne Player. Once
installed, it runs independently of RealOne Player. Not required - see
here for more information, including how to disable it |
| N |
eWare Startup |
iWareStart.exe |
eWare
iWare task bar. Not required |
| U |
EW Message
Server |
msg32.exe |
Conexant (older versions are Brooktree) Wavestream Message
Server - associated with Conexant based audio devices |
| N |
ExciteAssistantEXE |
ASSISTANT.EXE |
With Excite Assistant, you can access a wide variety of
online information, including email, news, and stock quotes without having
to have a browser window open |
| N |
Excite Platform |
Exlaunch.exe |
Loads an Icon in the startup tray that allows you to
receive service update notices for Excite@Home if you desire (note that
since Excite@Home appears to be
winding down this becomes irrelevant). May also allow you to kill the
Excite Toolbar that automatically loads in Internet Explorer |
| ? |
Excite Private Messenger Pipe |
x8impipe.exe |
?? |
| X |
execfg4 |
execfg4.exe |
Added as a result of the
ELECTRON VIRUS! |
| ? |
Execute |
delfolders.exe |
?? |
| U |
Exif Launcher |
Exiflaquickdcr.exe
or
QuickDCF.exe |
USB mass storage driver used by some digital cameras such
as the Fuji Finepix. Only required if you use it regularly |
| U |
ExitKiller |
Ekiller.exe |
Exit
Killer - automatically closes pop-up windows in your browser |
| ? |
exmon |
hpimoniter.exe |
Some kind of hp digital camera maybe
or a photo smart connection probe? |
| X |
explore |
explore.exe |
Added as a result of the
NETBUS and other VIRUSES! |
| U |
explorer
(1) |
explorer.exe |
Starts Windows Explorer. Unless this has been manually
added to startups or added by another program it could be a virus such as
PE_BISTRO or
DVLDR |
| X |
Explorer
(2) |
Explorer.exe |
Added as a result of the
DVLDR VIRUS! Note - this is not the valid "Explorer.exe" as it's in the
Windows\Fonts directory |
| X |
explorer
(3) |
wscript.exe <filename> |
Sneaky way to start any VBS script. Many viruses use VBS
files |
| N |
Explorer32 |
Expl32.exe |
Added as a result of the
HACKTACK VIRUS! |
| U |
Exshow95 |
EXSHOW95.exe |
Support software for some of the Kensington mice. Provides
access to extra features like those available with enhanced Logitech and MS
devices |
| ? |
Extranet AutoDial |
AutoExt.exe |
Nortel Networks Contivity Extranet Switching Software |
| U |
ExtraDNS |
ExtraDNS.exe |
ExtraDNS - DNS configuration tool |
| N |
Eye Tide
Launcher |
oneeyetideone.exe |
Nascar wallpaper |
| N |
EZDesk |
EZDESK.EXE |
Utility that remembers icon locations for each user and
resolution. Available
here |
| X |
eZmmod |
mmod.exe |
Ezula |
| Y |
ezShieldProtector for Px
or
ezPS_Px |
ezSP_Px.exe
or
ezSP_PxEngine.exe |
Engine that allows PrimoDVD from Veritas (was Prassi) and
Drag'n Drop CD
from Easy Systems (and maybe others) to record and protects against other
software overwriting the settings |
| U |
EZSMART App |
ezsmart.exe |
EZ-S.M.A.R.T. hard drive monitoring software from
StorageSoft - appears to be no longer supported |
| X |
ezula |
eZmmod.exe |
Regarded as "theftware" and bundled with the popular iMesh
and KaZaA file-sharing programs. Read
here
for more information |
| X |
eZuluMain |
eZuluMain.exe |
Comes with "KaZaA" installation. Advertising Spyware. Not
required but KaZaA won't work |

| |
Name/Startup Item |
Command |
Comments |
| ? |
fapmon |
fapmon.exe |
Fair Access
Policy monitor for DirecPC/DirecWay internet access |
| U |
FastCache |
fc.exe |
FastCache from AnalogX - speeds up browsing by resolving DNS requests
locally |
| N |
FastTrack Accelerator |
SPEED UP.EXE |
FastTrack
Accelerator - "speedup" utility for programs that use the FastTrack
network such as KaZaA Media Desktop, Grokster and Morpheus |
| N |
FastUsr
or
fast |
fast.exe |
Installs as part of Windows XP PowerToys as an option for
very-fast user switching (allowing a keystoke to switch users instead of
using the login screen). It is only used for the hot-key switch and yet it
hogs 1.5 megs of memory in two separate processes (one run by the user & one
by the system). Optional install in PowerToys |
| U |
FatPipe |
DHCP |
Software enabling high speed internet browsing (2-4 times
faster) and internet connection sharing for up to 5 users |
| U |
Fatpipe Dialer |
fpdialer.exe |
See above |
| U |
FBDirect |
FBDirect.exe |
Software that monitors the status of a Visioneer OneTouch
scanner button and allows you to scan, fax, copy, print, and easily
communicate by simply dragging and dropping scans on your PaperPort
Desktop!. The **** represents the model, 5300, 7600, etc. Available via
Start -> Programs |
| ? |
FBI |
FBISM.exe |
Compaq related but what does it do? |
| X |
fc |
runfc.exe |
Added as a result of the
CAMPURF VIRUS! |
| ? |
FD_SAP |
FD.exe |
Genicom SAP Printer driver. Is it
required? |
| U |
FEELitDeviceManager |
feelitdm.exe |
Associated with Immersion TouchSense devices (Logitech
Wingman Force Feedback Mouse and possibly other peripherals) |
| U |
Fellowes Proxy |
R3proxy.exe |
Installed with Fellowes EasyPoint mouse software. Not
necessary for normal functioning of Fellowes mice but it is necessary to use
the extended features of all Fellowes mice |
| N |
FileFreedom_Plugin |
wtm.exe |
FileFreedom peer-to-peer sharing program |
| X |
FileSoft |
Wscript.exe UpdataFiles.vbs |
Added as a result of the
SST.B VIRUS! |
| U |
Filterguard |
Filtrgrd.exe |
An icon located in the lower left of the screen and looks
like a lifesaver. This icon is a “short-cut” to access the basic features of
SOS-Guardian, SOS-KidProof Lite, SOS Best Defense and SOS Pro such as
Internet filtering utility. You can access this menu by “right-clicking” on
the icon |
| X |
Find Fast |
Findfast.exe |
Complete utter waste of space! Part of MS Office - searches
disk drives for Office file types to make opening them easier |
| Y |
Find
Virus Launch Program |
fvlaunch.exe |
Part of
Dr. Solomon's Antivirus |
| N |
FinePrint
Dispatcher v4 |
FPDISP4A.EXE |
FinePrint is a pseudo printer driver that intercepts normal
single sided A4 jobs and turns them into double sided A5 booklets |
| Y |
Fix-it |
mxtask.exe |
Part of Ontrack's Fix-it Utilities Suite. Loads a System
Tray icon that lets you access the full program. Needed if you run the crash
guard, intellicluster, anti-virus, or autoupdater. Otherwise not required |
| Y |
Fix-it AV |
memcheck.exe |
Part of Ontrack's Fix-it Utilities Suite anti-virus.
Performs a quick check of memory for signs of any virus. Exits afterward and
returns all resources used in one user's experience. Not required but could
be left without a drain on resources |
| ? |
FLASH32 |
-flash32.exe |
?? |
| N |
FlashPath Status
or
FlashPath Monitor |
SDSTAT.EXE
FLSHSTAT.EXE |
System Tray icon that you can't get rid of - and does not
need to run!. Tells you the battery status in the floppy disk adapter for
the smartmedia cards. Available via Start -> Programs |
| U |
Flexicd |
Flexicd.exe |
CD player - part of the
Win95 Power Toys |
| X |
FLooDNeT |
FLooDeR.exe |
Added as a result of the
FLOODNET VIRUS! |
| Y |
FltProcess |
msinet.exe |
Part of Cyber Patrol
internet filtering software to restrict access to certain types of material
on the internet. It can be disabled but do not ask how it's done |
| X |
FlyswatDesktop |
flydesk.exe |
Advertising spyware |
| U |
FmctrlTray |
Fmctrl.EXE |
Genius SM-Live Control Panel. Enhances audio output through
Genius sound cards (makes a big difference and worth the 3MB Ram used) |
| ? |
Focus |
Focus.exe |
ISDN configuration wizard? |
| X |
Folder Service |
wssdtu.exe |
Added as a result of the
MANIFEST VIRUS! |
| N |
Folding@home |
WINFAH.EXE |
Folding@Home is a distributed computing project which
studies protein folding, misfolding, aggregation, and related diseases -
must be running in order to access the internet to upload to the servers.
Available via Start -> Programs |
| N |
FontFix |
fontfix.exe |
Not required but what is it? |
| Y |
FoolProof |
fpwinldr.exe |
FoolProof Security PC security software from SmartStuff |
| Y |
FoolProofSweep |
?? |
Part of
FoolProof Security PC security software from SmartStuff |
| N |
Forget Me Not |
AGRemind.exe |
Calendar reminder part of
American Greetings® CreataCard® |
| N |
FotoStation Easy AutoLaunch |
FotoStation Easy AutoLaunch.exe |
Installed with a Nikon digital camera. Used to collect
photos uploaded from camera program NkVwMon.exe. If your camera is not
connected (via USB port) you do not need this program loaded either |
| Y |
FP Loader |
loadfp.exe |
FoolProof Security PC security software from SmartStuff |
| N |
Fpx |
mnmsrvc.exe |
Remote Desktop Sharing service part of Microsoft's
Netmeeting allowing users to share items on their screens across remote
locations |
| Y |
Freedom |
Freedom.exe |
Zero Knowledge
Freedom - Anti-Virus,
Personal Firewall and Parental Control, it also blocks ads, safeguards your
personal information, encrypts your passwords, and much more |
| ? |
Free
Downloads Monitor |
fdcmon.exe |
?? |
| U |
FreeMem Pro |
FMEMPRO.EXE |
Some users swear by memory management utilities such as
FreeMem Pro but others say you don't need them - especially if you have
Win98 or WinME. See
this
article and make up your own mind |
| U |
FreeMemVn2 |
FreeMem.exe |
Some users swear by memory management utilities such as
FreeMem but others say you don't need them - especially if you have Win98 or
WinME. See this
article and make up your own mind |
| U |
FreeRAM XP |
FreeRAM XP Pro x.exe |
Some users swear by memory management utilities such as
FreeRAM XP Pro
but others say you don't need them - especially if you have Win98 or WinME.
See this
article and make up your own mind. "x" indicates the version number |
| U |
freesurfer |
fs20.exe |
EMS Free
Surfer mk II - pop-up stopper |
| ? |
frguk |
shdrkmck.exe |
?? |
| N |
FriendlyWebQuick-Launch |
SELFCERT.EXE |
selfcert.exe is a stand alone program for creating your own
digital certificates for macros - the .exe is installed as an extra
basically by clicking on MS Office in add/remove programs and selecting
remove - also I would do away with the FriendlyWebQuickLaunchBar as well |
| Y |
FRW_EXE |
FRW.EXE |
ConSeal
Signal9 firewall - now McAfee Personal firewall |
| ? |
FSDPSRV |
FSDPSRV.exe |
?? |
| U |
F-Secure Management Agent |
FSMA32.EXE |
F-Secure Antivirus - F-Secure Policy Manager provides tools for
administering F-Secure software products |
| Y |
F-Secure Manager |
FSM32.EXE |
F-Secure Antivirus - carry out scheduled virus scans automatically |
| U |
fsp |
fsp.exe |
Folder
Shield - hide entire directories and thus prevent access by anyone else
to your personal files and documents |
| N |
FSScrCtl |
FSScrCtl.exe |
Screen saver control applet used by the "Stardust Screen
Saver Toolkit" and "SolidWorks Screen Saver" |
| U |
fsserv |
fserv.exe |
Farsighter Server - monitors a remote computer invisibly by streaming
video to a viewer on your computer. You will know exactly what is happening
on the remote computer as you see it in real-time |
| Y |
F-StopW |
F-StopW.exe |
F-Prot anti-virus
background scanner by F-Risk Software |
| X |
FSW |
FSW.exe |
FreeScratchAndWin parasite |
| U |
Ftpqueue |
Ftpsched.exe |
Part of
WS_FTP
Pro from Ipswitch. Queueing facility for scheduling FTP transfers |
| Y |
fwenc.exe |
fwenc.exe |
Check Point SecuRemote VPN client - "dynamic and fixed IP addressing for
all ISP services - dial-up, cable modem, or DSL - the ideal solution for
telecommuters and mobile workers" |
| N |
fwrastrc |
fwrastrc.exe |
Dial-up software for Friendly Technologies/1NationOnLine
free ISP |

| |
Name/Startup Item |
Command |
Comments |
| N |
Gadwin
PrintScreen |
PrintScreen.exe |
Gadwin
PrintScreen
- utility to capture, print or save the current window |
| U |
Gainward |
TBPanel.exe |
Configuration utility for Gainward graphics cards. Not
required unless you use non-default settings. Available via Start ->
Settings -> Control Panel |
| U |
GammaHotKeys |
setgamma.exe |
Part of the
RadeonTweaker program for adjusting ATI Radeon graphics cards. Allows
you to adjust the gamma (or brightness) when playing a full-screen game
without switching back to the desktop |
| X |
Gator |
gator.exe |
Spyware - see
here
for removal instructions |
| X |
Gator eWallet |
gator.exe |
Gator
eWallet from The Gator Corporation. Spyware - see
here
for removal instructions |
| ? |
GazelDisplay |
gsyno.exe |
BT
Digital Access USB |
| U |
GBTray |
GBTray.exe |
System Tray icon access to GoBack (below) |
| ? |
GCC Reminder |
gccrem.exe |
Associated with
AcraMax Greeting Card Creator. Is it a
registration reminder? |
| N |
GDrive |
GDriver.exe |
Found on IBM systems. All it
does is set the CDROM drive letter to G:. Set your drive letter manually via
Start -> Settings -> Control Panel -> System -> Device Manager |
| N |
Gearbox |
confsvr.exe |
NTL's Gearbox software for configuring internet connections
with their NTLWorld software - does a similar job to the Internet Connection
Wizard which can be used instead using the dial-up details available
here |
| X |
GEDZAC |
GEDZAC.exe |
Added as a result of the
GEMEL VIRUS! |
| N |
GemStRmW |
GemStRmW.exe |
For a GemPlus smart card reader. If it doesn't start
automatically when you insert the smart card, start it manually |
| Y |
Genie USB
Monitor |
USBmonitor.exe |
Port monitor for an external USB hard drive. Required to
enable access to the drive |
| N |
GetRight Tray
Icon |
GETRIGHT.EXE |
GetRight from Headlight Software - download manager for
resuming downloads and choosing multiple download locations. The freeware
version is/was spyware. The registered version isn't if you don't install
the Aureate/Radiate software. Available via Start -> Programs |
| N |
GhostStartService |
GhostStartService.exe |
Required to run the Windows based wizard in
Norton Ghost - added from the 2003 version. Will start automatically
when you run the wizard |
| N |
GhostStartTrayApp |
GhostStartTrayApp.exe |
System Tray access to
Norton Ghost - added from the 2003 version |
| Y |
GilatFTC |
ftc.exe |
For Gilat Communications internet satellite systems -
associated with SkyBlaster modem. Required if you have this system |
| Y |
Gilat SOM
Enumerator |
dllhost.exe |
For Gilat Communications internet satellite systems -
associated with SkyBlaster modem. Required if you have this system |
| ? |
GisdnLog |
gisdnlog.exe |
BT
Digital Access USB |
| Y |
Glide |
Glidew32.exe |
Cirque touchpad driver |
| Y |
Gmouse |
Gmouse.exe |
Amouse mouse driver - required if you use non-standard
Windows driver features |
| U |
Gnetmous |
gnetmous.exe |
Genius NetScroll+ mouse driver - required if you use non-standard
Windows driver features |
| U |
GoBack |
GBMenu.exe |
Roxio's (nee Adaptec)
GoBack
software which allows you to revert back to a previously working state on
you hard drive if you install a new program and your system goes faulty -
performing the same functions with extra features as System Restore on
WinMe/XP systems. Disable before running Scandisk or Defrag. Not required
for WinMe/XP users, recommended for Win9x/NT/2K users |
| U |
GoBack
Polling Service |
GBPoll.exe |
Roxio's (nee Adaptec)
GoBack
software which allows you to revert back to a previously working state on
you hard drive if you install a new program and your system goes faulty -
performing the same functions with extra features as System Restore on
WinMe/XP systems. Disable before running Scandisk or Defrag. Not required
for WinMe/XP users, recommended for Win9x/NT/2K users |
| U |
GoBack Tray Icon |
GBTray.exe |
System Tray icon access to GoBack (above) |
| N |
GoogleDCClient |
GoogleDCC.exe |
Google Compute Client - new feature of Google Toolbar that does complex
calculations in the background when idle |
| U |
GoToMyPC |
g2svc.exe |
ExpertCity
GoToMyPc logon - web-based remote-access solution that allows
individuals and companies to register their computers online and then
securely access those computers from any web browser |
| X |
Go!Zilla |
gozilla.exe |
A variant for the Go!Zilla download manager, see above |
| X |
Go!Zilla Monster Downloads |
Go.exe |
Download manager for resuming downloads and choosing
multiple download locations. Advertising spyware |
| N |
GRA |
gra.exe |
Looks at system resources at startup and warns you if they
have dropped. Contains links to the Disk Clean Up, Defrag and Start Up Menu.
It does have a link to a startup configuration utility. Similar to msconfig
but can keep a list of disabled apps. Not really necessary. Only appears if
you load the Gateway Startup Utility |
| U |
Gravis
Appawareloader |
dbserver.exe |
Looks like it's associated with
Gravis game controllers
and the Keyset Manager, allowing the user to program the buttons for games
that don't support them |
| ? |
Gravis Xperience Driver
Support |
Grxp4exe.exe |
Associated with the drivers for
Gravis game
controllers. What does it do and is it required? |
| ? |
GrdSys32 |
GrdSys32.exe |
X-Stream ISP software. Offers free Net access funded by
on-screen ads. Is it required or can you create your
own dial-up networking connection to use on demand? |
| N |
Greetings
Workshop |
GWREMIND.EXE |
You really want to be reminded about somebody's birthday at
the expense of resources? |
| X |
gremier |
wscript.exe gpremier.vbs |
Added as a result of the
GPREMIER VIRUS! |
| N |
GrpConv |
grpconv.exe |
To facilitate the upgrade from Windows 3.1 to Win95/98, an
executable file named GRPCONV.EXE is included with Win95/98. This file
provides the translation of groups and group items to folders and links
unless you need to access Win 3.1 Group files |
| ? |
Gscbc |
Gscbc.exe |
?? |
| X |
gshp |
zzgshp.vbs |
Homepage hi-jacker |
| N |
Gsiconexe |
Gsicon.exe |
ADSL modem monitor from
Eicon
Networks (as used by BT for its Broadband internet service for example).
Can safely be disabled without affecting the connection - all this does is
give an indication of connectivity and access to the diagnostic facilities |
| N |
GSOrganizer |
GSOrganizer.exe |
GoldenSection
Organizer - personal information manager |
| X |
GStartup |
GMT.exe |
Gator spyware variant. See Gator |
| N |
Gtwatch |
gtwatch.exe |
Associated with a Mustec scanner and not required |
| N |
Guardian |
CMGrdian.exe |
McAfee's QuickClean, an offline version of the one in their
online Clinic. Normally run offline and not needed. Incidentally,
incorporates more cleanup programs than the likes of WinOptimizer and System
Mechanic |
| X |
GustavVED |
<filename.exe> |
Added as a result of the
OPASERV.H VIRUS! |
| N |
GWMDMMSG |
GWMDMMSG.exe |
Used with internal modems on Gateway and vprMatrix PCs.
This is the "GTW modem messaging applet" and is not required for the modem
to work correctly |
| U |
GWMDMpi |
GWMDMpi.exe |
Used with internal modems on Gateway PCs such as the 450SX
Notebook. Required for audio settings to be maintained and does not remain
in memory once run. See
here for more information |
| Y |
gw port
controller |
PORTCT95.EXE |
From a visitor - "I must keep it active in start up or my
Lexmark printer and RCA Cam program cannot discover a working port to work".
From the file properties, the file is known as "Smart Thru Fax Drive Spy"
and is supplied by Samsung |
| U |
gwum |
gwum.exe |
Gigabyte utility manager. Loads if you have a Gigabyte
motherboard and got a full bundle of utilities installed. Monitors CPU,
fans, BIOS etc. Only used by system "tweakers" |
| ? |
gyy |
gyy.exe |
Possibly Gator
(and therefore spyware) related? |

| |
Name/Startup Item |
Command |
Comments |
| U |
HaMFrontPanel |
hampanel.exe |
Displays a panel simulating modem lights for the Intel HaM
internal modem. The lights are useful as a reminder to disconnect from the
net if you are likely to forget, but otherwise pointless |
| U |
Handy Backup 3.9 |
hbagent.exe |
Handy
Backup - automatic backup of your critical data to virtually any type of
storage media including CD-RW devices and remote FTP servers |
| U |
Hardware
Sensors Monitor |
hmonitor.exe |
Utility to monitor fan speed and temperatures - similar to
Motherboard Monitor. Only required if you're concerned about your system
temperature - typically for "overclocked" systems |
| U |
Hare |
hare.exe |
Hare - improve and optimize performance of desktop/laptop PCs |
| U |
HawkEye |
HAWK_95.EXE |
Control Panel application for the old Number Nine graphics
cards to change resolution, colour depth, etc. Available via Start ->
Programs |
| U |
HawkEye IV Control Panel |
HAWK_32.EXE |
Control Panel application for the old Number Nine graphics
cards to change resolution, colour depth, etc. Available via Start ->
Programs |
| X |
Hbinst |
Hbinst.exe |
Hotbar
enhances the surfing experience offering a variety of innovative and fresh
skins to the browser while providing users worldwide with access to various
services of added value and fun. Also regarded as adware/spyware due to it's
adds and browsing habits information gathering - see
here |
| N |
HCDetect |
HCDetect.exe |
MS HomeClick Network - simple home network setup and
configuration program included with 3Com HomeConnect home networking
products. Runs in the background for network printer notification,
detection, and Internet Connection Sharing (ICS) taskbar icon. Not required
- network can be set-up manually, also has a known memory leak problem |
| U |
Hcontrol |
hcontrol.exe |
Hotkeys on an ASUS Notebook. Only required if you use the
additional keys |
| N |
HC Reminder |
hc.exe |
For Compaq PC's. Help Compiler, crunches help database,
will run without being in startup when needed |
| ? |
HDhelp |
tbhdhelp.exe |
Associated with Philips
Edge series soundcards. Is it required? |
| N |
HDtray |
HDtray.exe |
Philips Edge Series Control Panel Tray Utility - system
tray icon for a Philips
Edge series soundcards. Available via Start -> Settings -> Control Panel |
| ? |
Help |
helpext.exe |
?? |
| X |
HelpExp.exe |
HelpExp.exe |
Attune HelpExpress. Disable - see
here |
| U |
Hermes Messenger |
DGDRHE~1.EXE |
A LAN messenger alternative to WinPopUp -
Digital Dreams
Software |
| N |
Hewlett
Packard Recorder |
Remind32.exe |
HP multifunction registration |
| U |
Hf |
Hf.exe |
Hide
Folders - hide your folders so only you can view them |
| N |
HGTXPEI |
FirstReboot.exe |
Herucles Audio tool for the Hercules Game Theater XP
soundcard. Available via Start -> Settings -> Control Panel |
| ? |
HiberMonitor |
HCount.exe |
?? |
| U |
Hibernation |
hib32.exe |
Reduces the power consumption when the laptop isn't being
used to preserve battery power. Similar programs on other laptops reduce the
processor clock rate, etc. Required if you run of battery regularly |
| U |
hidserv |
hidserv.exe |
This is the
Human Interface Device Server for Win98SE/2000/Me/XP, it is required
only if you are using USB Audio Devices you can disable via Msconfig. See
here. Typical examples are USB multimedia keyboards with volume control
and web-ready keyboards. For example - loaded by default with MS DSS80
Speakers because they have Volume, Mute and Bass controls on the speaker.
Some users may experience problems disabling this - if this is the case then
re-enable it. Equivalent to MMHid in Win98. On HP Computers, HIDSERV is the
controller for the keyboard sound controls on the USB and PS/2 keyboards |
| N |
HistoryKill |
histkill.exe |
HistoryKill removes your web surfing path by removing the
URL drop-list history, detailed history file, cache, and cookies in both IE
and Netscape Navigator browsers. Available via Start -> Programs |
| U |
hkcmd |
hkcmd.exe |
Installed by the Intel 810 and 815 chipset graphic drivers.
If you want the Ctrl+Alt+F12 or similar keypresses to access Intel's
customised graphics properties, you need it, otherwise not. Can be disabled
via the Display Properties in Control Panel |
| U |
hkserv |
HKserv.exe |
Keyboard manager program required to use programmable power
and function keys on some laptops such as the Sony PCG R505TS |
| U |
hkss |
hkss.exe |
Compaq HotKey Support - multimedia keyboard support |
| U |
Hmonitor |
Hmonitor.exe |
Hardware sensor monitoring program. Only required if you
overclock your system and want to check on the status |
| N |
Holiday Lights |
Holiday Lights.exe |
Holiday
Lights from Tiger Technologies. Festive desktop enhancement that adds
lights. Available via Start -> Programs |
| U |
HomeAlarm |
HomeAlarm.exe |
Chameleon Clock - system tray clock replacement |
| ? |
HomeCentre WakeUp |
LGWAKEUP.EXE |
Associated with the no longer
supported Xerox HomeCentre printer/scanner |
| ? |
Honor |
honor.exe |
?? |
| U |
HookSys |
HookSys.exe |
SurfinGuard Pro - protects against all malicious code delivered through
executables, scripting files, ActiveX and Java |
| X |
Hotbar |
Hbinst.exe |
Hotbar
enhances the surfing experience offering a variety of innovative and fresh
skins to the browser while providing users worldwide with access to various
services of added value and fun. Also regarded as adware/spyware due to it's
adds and browsing habits information gathering - see
here |
| U |
Hot Corners |
Hotc.exe |
Hot Corners
- "lets you quickly activate or disable your screen saver by moving the
mouse into a given corner of the screen" |
| U |
HotIDE |
hotide.exe |
HotIDE allows Acer TravelMate owners to hot-swap external
drives without switching of their notebooks |
| U |
HotkeyApp |
HotkeyApp.exe |
Part of
Acer Launch Manager - programmable keys on such laptops as the
TravelMate 610 |
| U |
Hot
Key Keybd 9910 Daemon |
SK9910DM.exe |
For programmable keys on a multi-function keyboard - such
as provided by Gateway - for volume, one-button net connection. Required if
you use the extra keys |
| U |
HotKeysCmds |
hkcmd.exe |
Installed by the Intel 810 and 815 chipset graphic drivers.
If you want the Ctrl+Alt+F12 or similar keypresses to access Intel's
customised graphics properties, you need it, otherwise not. Can be disabled
via Control Panel -> Display Properties |
| ? |
Hot
Party 22 |
hotpart22.exe |
?? |
| N |
HotSync Manager |
hotsync.exe |
Installed when connecting a Palm HotSync cradle up to a USB
port. The Blue and Red Arrow Icon that enables Palm / Handspring
Synchronizing. Available via Start -> Programs |
| X |
hotwetlove |
hotwetlove.exe |
Adult content dialler. Will not uninstall - components have
to be manually deleted |
| U |
HoverDesk |
HoverDesk.exe |
HoverDesk - desktop replacement software |
| ? |
hp 1000 firmware |
fwdl.exe |
HP LaserJet 1000 related. Is it a
driver or automatic firmware update (based upon the filename)? |
| N |
hpaiodevice |
hpodev07.exe |
Direct from HP - "Device Objects Server - detects all
device events and handles all ongoing communication on the device. Loads in
the Startup group (except when "portable" is chosen during installation)".
Related to various HP all-in-one printer/scanner/copier devices. They print
and copy fine with those files disabled, and the icon installed on the
desktop that points to "hpodir07.exe" works just fine if you need to use the
scanner |
| N |
HPAiODevice(hp psc
900 series) -1 |
hpobrt07.exe |
Installed with a Hewlett Packard 900 series colour printer,
scanner, fax, photo card slot printer, copier. Assumed to perform an
identical function to hpaiodevice above |
| N |
HP-Aio Flight |
Remind32.exe |
HP multifunction registration |
| N |
HPAIO_PrintFolderMgr |
hpoopm07.exe |
Directly from HP: "This process has one purpose - detects
if the device moves to a different port, and notifies other processes to
look on the new port." For various HP all-in-one printer/scanner/copier
devices. They print and copy fine with those files disabled, and the HP icon
installed on the desktop that points to "hpodir07.exe" works just fine if
you need to use the scanner |
| ? |
HP AutoIndexer |
hppautoindexer.exe |
?? |
| U |
H/PC
Connection Agent |
WCESCOMM.EXE |
Active sync for use with Windows CE based palm PC |
| N |
HP CD-DVD
or
HP CD Writer |
hpcdtray.exe |
System Tray access to a HP CD-Writer's functions. Available
via Start -> Programs |
| X |
hp center |
BACKWEB-137903.exe |
Based upon HP's own description from
here - "With the My HP Center,
consumers have access directly from the desktop to Internet sites featuring
special offers for HP customers ranging
from personal finance and shopping to digital imaging and music" I have
classified this as adware. The number may change - if
yours is different let me know |
| X |
hp center UI |
ShadowBar.exe |
User Interface for HP Center |
| U |
HPDJ Taskbar
Utility |
hpztsbol.exe
hpztsd02.exe
hpztsb04.exe
hpztsb05.exe |
(1) Ghostscript device driver for printers understanding
Hewlett-Packard's Printer Command Language - see
here for more info
or
(2) Creates 1 or all 3 icons on taskbar. The 1st one has a yellow border
around it warning that ink is low on the printer. The 2nd one is HP Device
Detection Software and the 3rd one is about a card being inserted into the
Hp printer |
| N |
HP_DLA |
?? |
On HP PCs, tray icon for dla |
| N |
hpfsched |
hpfsched.exe |
HPFSCHED is a small TSR that will remind you to clean the
cartridges in your DeskJet from time to time in order to keep print quality
high. It can be removed from the run line in win.ini if you do not want that
feature |
| N |
hpgs2wnd |
hpgs2wnd.exe |
"HP's exclusive
Share-to-Web software makes it easy to share content with others through
our affiliate Internet websites." Available via
Start -> Programs |
| U |
HPHA1MON |
HPHA1MON.EXE |
Media card reader for some HP series printers allowing them
to read digital camera memory cards directly. Only needed if you use this
feature and known to cause system crashes in some cases |
| N |
HPHmon03 |
HPHMON03.EXE |
Monitors the status of a HP printer. If you turn off the
printer while still using the computer, a yellow triangle with exclamation
mark will replace the original icon on task bar |
| X |
Hphome |
hphome.js |
Homepage hijacker |
| ? |
HP IDScheduler |
HPIDSCHD.exe |
HP Instant Delivery Scheduler |
| N |
HP Info Express |
?? |
On HP PCs, allows the computer to automatically receive
notifications from HP over the Internet. Associated with BackWeb |
| N |
HP Internet
Center |
?? |
Loads the HP Internet center surfboard on startup. HP
Internet Center allows you to customize the multimedia keys on the fly
without having to go the Control Panel --> Keyboards to change them |
| N |
HP JetSpeed
Autostart |
AUTOSTART.EXE |
Autostart executable for the old multiplayer game HP
Jetspeed |
| N |
HP JetDiscovery |
HPJETDSC.EXE |
HP JetAdmin software which monitors printing jobs on a
network environment |
| ? |
hpjsiroute |
hpjsira.exe |
Related to HP laserjet printers and
IP addresses. An IP address is appended to the name field - ie
"hpjsiroute192.168.1.2" |
| Y |
HpLamp |
HPLAMP.EXE |
HP Scanner Utility that controls your scanner’s light bulb.
Needed if it's switched on. Also refer
here for troubleshooting |
| U |
HPLogiFinder |
hp_finder.exe |
HP LogiFinder helps detect and allows the use of the centre
button for the Logitech mouse. Can be disabled if not used |
| ? |
HP
Network Registry Agent |
hpnra.exe |
?? |
| N |
hpodblia |
hpodblia.exe |
HP OfficeJet Scan Button Monitor on a multi-function
printer/copier/scanner. Start your scanning software manually |
| N |
hpodlb08 |
hpodlb08.exe |
HP OfficeJet Scan Button Monitor on a multi-function
printer/copier/scanner. Start your scanning software manually |
| ? |
HP OfficeJet Series 700
Startup |
HPOSTR03.EXE |
?? |
| N |
HP
Parallel Port Test |
hppt.exe |
Associated with a HP ScanJet scanner |
| ? |
HP Port Resolver |
hpbpro.exe |
?? |
| Y |
hpppta |
HPPPTA.exe |
HP parallel port driver for certain hardware |
| N |
HP Precision
Scan |
hpmdlbwx.exe |
Same as HP ScanPicture below |
| N |
HP
Presentation Ready |
PresRdy.exe |
HP Omnibook related: "Press a dedicated button above the
keyboard and the system will instantly load your presentation software and
change the screen resolution to match your display device" |
| N |
HPPROPTY |
HPPROPTY.EXE |
HP LaserJet Toolbox |
| U |
HPPWRSAV |
HPPWRSAV.EXE |
Power save related for HP Scanners. Many users have
complained of system freezes with it running but it stops the light from
remaining on all the time. Try www.hp.com,
pick your OS option under the SUPPORT tab, follow the instructions and you
will find an updated lamp control patch |
| ? |
hpqcmon |
hpqcmon.exe |
From HP and related to digital
imaging |
| U |
HP RecordNow |
?? |
From HP "Software for the CD writer. Do not prevent from
starting unless the CD writer is never going to be used." |
| N |
HP ScanPicture |
hpsplmwa.exe |
HP multifunction scanner software. Available from HP Office
Jet R Toolbox so not required |
| U |
HPSCANMonitor |
hpsjvxd.exe |
HP scanning software that enables you to scan images from
your scanner. Needed if you're using the scanner |
| ? |
hpScannerFirstBoot |
scannerfb.exe |
HP scanner related |
| U |
HP ScanPatch |
HPScanFix.exe |
Program that starts up and automatically fixes earlier
versions of the Scanjet 5100c software. If a Scanjet 5100C scanner is not
going to be used, then it is safe to remove or prevent from starting |
| ? |
HP SchedIndexer |
hppschedindexer.exe |
HP laserjet related |
| N |
hpsjbmgr |
hpsjbmgr.exe |
HP ScanJet Button Manager. It allows users of the HPScanJet
scanners to indicate what the buttons on the scanner will do automatically
if pushed. Not required at startup, unless the scanner is used every day,
such as in a business environment |
| N |
HPStart |
hpstart.wsf |
This a script used by HP that runs the first time one of
their computers is started. Can't imagine why it would be starting up after
the first boot |
| ? |
HP Status Server |
hpboid.exe |
?? |
| U |
hpsysdrv |
hspsysdrv.exe |
This item keeps track of how many times the system has been
recovered and the times of the first and last recoveries done on the system.
Leaving unchecked will sometimes prevent the Keyboard Manager program from
detecting that the computer is an HP. Since this program/driver was only
made to run on HP, if it can't tell that it is an HP it will not run. If
unchecked, it can prevent the running of the Application Recovery CDs, the
use of the multimedia keys, and the HP Instant Support. Also seen that
without it running, the Riptide Sound card that was installed on some older
HP computers stops working |
| ? |
hp Silent
Service |
HpSrvUI.exe |
HP related |
| N |
HP Simple Trax |
Hpcron.exe |
Supplied with HP CD-RW drives - stores information about CD
contents on your hard drive. Available via Start -> Programs or Desktop Icon |
| N |
HP Updates |
?? |
On HP PCs, allows the computer to automatically receive
notifications from HP over the Internet. Associated with
BackWeb |
| N |
HPZTS04 |
hpzts04.exe |
Hewlett Packard printer toolbox shortcut that resides in
the system tray |
| Y |
HREF.OCX |
regsvr32.exe ....\HREF.OCX |
HREF.OCX is an ActiveX control developed by xFX JumpStart
and used to provide HTML-alike clickable links on Windows-based programs
such as
PopUpKiller |
| U |
HTpatch |
htpatch.exe |
HTpatch.exe is part of the SiS AGP patch - BUT unless your
processor (and motherboard) supports HyperThreading (HT) and this feature is
enabled it will actually SLOW your graphics card by around 6% |
| Y |
HWinst |
N/A |
For Gilat Communications internet satellite systems. Gilat
rescue (Satellite system restore). Required if you have this system. Can
cause a BSOD (blue screen of death) if left out |
| X |
HXDL.EXE
or
HXIUL.EXE |
HXDL.EXE
or
HXIUL.EXE |
Believed to be spyware - made by a company called
Alset. Also known as
"HelpExpress". Will install itself if you have previously had Attune by Aveo
installed as they're by the same company. Uninstall via Add/Remove programs |
| U |
HydraVisionDesktopManager |
desk98.exe |
ATI/Appian HydraVision Desktop Manager software - monitors
and regulates window and dialog box placement according to user preferences
when using a multi monitor setup |
| U |
HydraVisionViewport |
viewport.exe |
ATI/Appian HydraVision Desktop Manager software - monitors
and regulates window and dialog box placement according to user preferences
when using a multi monitor setup |

| |
Name/Startup Item |
Command |
Comments |
| X |
I386 |
I386.exe |
Added as a result of the
MYPOWER VIRUS! |
| ? |
I81SHELL |
I81SHELL.exe |
Appears to be related to drivers for
an Intel 810 graphics chipset on an ASUS motherboard |
| U |
i8kfangui |
i8kfangui.exe |
Graphical interface for fan speed control |
| Y |
iamapp |
iamapp.exe |
AtGuard personal firewall engine. As Atguard was bought by
Symantec some time ago, it's now the Norton Personal Firewall executable as
well |
| ? |
Iap |
iap.exe |
Possibly part of
Dell OpenManage Client Instrumentation - software that allows remote
management application programs to access information about, monitor the
status of or change the state of the client computer, such as shutting it
down remotely? |
| ? |
Ibmmon.exe |
Ibmmon.exe |
?? |
| ? |
Ibmpmsvc |
ibmpmsvc.exe |
IBM Thinkpad driver. Is it required? |
| ? |
IBMUltraBayHotSwapSound |
IBMBAYSN.EXE |
Supports hot swapping in Thinkpad
UltraBay Option on IBM ThinkPad laptops. Is it needed though - does it just
play a sound? Related to the item below |
| U |
IBMUltraBayHotSwapCPLLoader |
IBMBAY2N.EXE |
Supports hot swapping in Thinkpad UltraBay Option on IBM
ThinkPad laptops |
| N |
ICH Synth |
eusexe.exe |
Sound related and can be disabled without affecting
performance although advanced sound features may be sacrificed.
May be related to Compaq PC's with "SoundMAX
integrated Digital Audio" (Analog Devices Inc.) devices |
| N |
IC_KEY_3 |
spvic.exe |
Instant Chess related |
| U |
iClean |
iClean.exe |
IEClean -
"advanced, comprehensive package of tools which perform a number of
functions to allow you to control your online privacy" |
| N |
iCn |
NAG.EXE |
iChoose - shopping browser enhancement that alerts you to cheaper deals
for goods you want to buy, if they exist |
| N |
ICO |
ICO.EXE |
Found on a Sony Vaio laptop and seems to be related to
Mouse Suite 98 Daemon according to the properties. Appears to cause a
behaviour where the desktop suddenly flips back up when playing DirectX
associated games |
| N |
Icon Animation |
HDE.EXE |
Part of McAfee Nuts & Bolts. Provides entertaining
animation of your desktop icons |
| Y |
ICONCLNT |
iconclnt.exe |
APC PowerChute Tray Icon. Associated with the
UPS listing |
| U |
ICONDESK |
ICONDESK.EXE |
Small utility which will allow you the option of hiding or
showing your desktop icons |
| N |
Iconfig.exe |
Iconfig.exe |
Icon for LS-120 "Superdisk" |
| N |
Icon Hearit 95 |
hearit95.exe |
Audio desktop customization utility from Moon Valley
Software. Resource hog |
| N |
Icon Hearit 98 |
hearit98.exe |
Audio desktop customization utility from Moon Valley
Software. Resource hog |
| N |
Iconoid |
Iconoid.exe |
Iconoid is
a desktop icon manager |
| N |
Iconsaver |
Iconsaver.exe |
IconSaver
is a desktop icon manager |
| N |
ICQ Lite |
ICQLite.exe |
ICQ
Lite - compact version of the popular messaging program |
| N |
ICQ Plus |
vplus.exe |
ICQ Plus
is a freeware utility makes your ICQ skinnable (change the look). Available
via Start -> Programs |
| ? |
ICSDCLT |
rundll32.exe Icsdclt.dll, ICSClient |
Something to do with ICS (Internet
Connection Sharing)? Is it required? |
| Y |
ICSMGR |
ICSMGR.EXE |
Monitors DNS and DHCP requests for ICS (Internet Connection
Sharing). Needed if you’re sharing the internet on various computers |
| X |
ID8525 |
ID8525.exe |
ID8525 VIRUS and homepage hijacker! |
| N |
ID Commander |
IDCom.exe |
Caller ID utility for identifying incoming telephone
numbers |
| X |
IDE |
ide.exe |
Added as a result of the
ASSASIN.F VIRUS! |
| ? |
IDEDMA |
cfgdmaof.exe |
?? |
| X |
IDE Loader |
IDElibr32.exe |
Added as a result of the
XILON VIRUS!. Related to the game "Diablo II" |
| U |
iDesktop |
idesktop.exe |
Immersion TouchWare Desktop software for devices such as the Logitech
iFeel Mouse |
| N |
IDMan |
IDMan.exe |
Internet
Download Manager - download files faster, schedule and resume |
| N |
IDW Logging Tool |
idwlog.exe |
Added with WinXP SP1. Usually only found in internal builds
only to indicate the current build being used. Can cause slow network logon
problems |
| U |
IECleanAux |
Ieboot6.exe |
IEClean by
Kevin McAleavy - cookie manager, cache cleaner, history cleaner, etc.
Performs cleaning tasks at startup |
| X |
IEDriver |
IEDriver.exe |
Installed as part of adware (Cydoor) based peer-to-peer
file sharing software called URLBlaze |
| N |
ietsr |
ietsr.exe |
IEClean by
Kevin McAleavy - cookie manager, cache cleaner, history cleaner, etc |
| U |
IFSplash.exe |
IFSplash.exe |
I-FORCE driver for force feedback steering wheel |
| N |
igfxtray |
igfxtray.exe |
Quick access to the control panel via a System Tray icon
for graphics based upon the Intel chipsets (ie, i810). These chipsets are
often included on motherboards. Available via Start -> Settings -> Control
Panel |
| N |
iIWiper |
Systemwiper.exe |
System
Wiper from iI Software - allows you to clear the history of your
activites from you computer. Run manually on a regular basis |
| ? |
IKE Service 95 |
IKEService.exe |
Associated with
PGP |
| U |
iKeyWorks |
IKEYMAIN.EXE |
A4Tech wireless keyboard driver and utility |
| X |
iLLeGaL
or
iLLeGaL.exe |
Mplayer.exe |
Added as a result of the
HOLAR.C (or
GALIL@MM) VIRUS! Note - this should not be comfused with Windows Media
Player which has the same filename |
| ? |
ILO_Office_Manager |
IntEdReg.exe /OFFMAN |
Intense
Educational Ltd - Language Office Software. Is it
required? |
| U |
Imagefox |
imagefox.exe |
ImageFox 2.0 is an "add-on" graphics previewer for most Windows
Open/Save As dialog boxes |
| Y |
Image &
Restore |
IMAGE32.exe |
Part of McAfee Nuts & Bolts. Image/Restore can recover from
drives that have been accidentally formatted or completely erased, if Image
was recently run |
| N |
imekrig |
imekrig.exe |
Part of MS
Input Method Editor which is used to ease the input of Asian characters
in MS Office (Chinese, Japanese and this one is Korean) |
| N |
Imesh |
?? |
Imesh is
a file sharing system |
| N |
Imesh Auto
Update |
?? |
Update check for above. Turn the update off under "options" |
| N |
ImgIcon |
ImgIcon.exe |
Used by Iomega drives. Details of its purpose can be found
here. Available via Start -> Programs |
| N |
ImgStart |
ImgStart.exe |
Used by Iomega drives. Details of its purpose can be found
here. Available via Start -> Programs |
| N |
imjpmig
or
Imjpmig8.1 |
IMJPMIG.EXE |
Part of MS
Input Method Editor which is used to ease the input of Asian characters
in MS Office (Chinese, Korean and this one is Japanese) |
| ? |
immcheck.exe |
immcheck.exe |
Related to I-FORCE driver for force
feedback steering wheel? |
| N |
Imonitor |
Plguni.exe |
McAfee QuickClean 3.0 - removes internet clutter and unwanted programs |
| N |
iM Start Center |
iM_Tray.exe |
Installed with the Sound Blaster Audigy range of
soundcards. A radio tuner installed if the user chooses during installation.
Available via Start -> Programs -> iM Networks -> iM Radio Tuner |
| N |
InCD |
incd.exe |
Ahead InCD
packet writing software. Similar to DirectCD. On my system there isn't an
entry, on another visitor's there is. Run manually before insert an
appropriately formatted CD-RW disk |
| N |
InControl Desktop Manager |
DMHKEY.EXE |
For Diamond Multimedia video cards. Allows System Tray
access to desktop utilities such as screen resolution. Available via Start
-> Programs |
| N |
Incredimail |
incredimail.exe |
"IncrediMail
is an advanced, feature-rich email program that offers you an unprecedented
interactive experience. Unique multimedia features will enable you to tailor
your email experience so that it fits your mood and personality" |
| N |
IndexSearch |
IndexSearch.exe |
Associated with PaperPort scanner software from ScanSoft |
| X |
Inetapi |
Netapi.exe |
Added as a result of the
NETDEVIL.14 (NetDevil 1.4) VIRUS! |
| ? |
InetConf |
inetconf.exe |
?? |
| U |
Inetd |
INETD32.EXE |
Windows Inet Daemon from Hummingbird Communications. "Hummingbird Inetd
has the advanced ability to conserve PC resources by listening for
connection requests and launching server daemons". Provides PCs with the
full functionality of a UNIX workstation |
| X |
Inet Delivery |
Intdel.exe |
Spyware |
| U |
inetinfo.exe |
inetinfo.exe |
Executable used by MS Internet Information Server (IIS). If
it's running, then so is IIS. Useful in knowing whether you require the
patch for the Code Red worm. Comes with PWS (Personal Web Server) or NT4 and
handles ASP-, PHP code (+ more) |
| X |
InetMSN |
msnet.exe |
Added as a result of a variant of the
SDBOT VIRUS! |
| ? |
Infoplay.exe |
Infoplay.exe |
Written by New Media Properties, LLC
and you're asked if you want to download and install it if you visit one of
their search engine
websites (which I chose not to). What does it do and is it needed? |
| U |
Info Select |
is.exe |
Info Select from Micro Logic - personal information manager |
| U |
Infra-red Monitor |
IRMON.EXE |
System Tray access to infra-red devices. Not required
unless you use infra-red devices |
| Y |
Initialize8x8 |
8x8_init.exe |
Tool that initializes a Pinnacle PCTV card - maybe in
capture or in showing overlay |
| N |
Ink Monitor |
InkMonitor.exe |
Associated with Epson (and maybe other) printers. Tells you
when the ink's running low and asks if you want to buy another cartridge
on-line |
| N |
InkWatch |
InkWatch.exe |
Associated with Canon (and maybe other) printers. Tells you
when the ink's running low and asks if you want to buy another cartridge
on-line |
| Y |
InoRPC |
InoRpc.exe |
Associated with
eTrust Antivirus/InoculateIT |
| Y |
InoRT |
InoRT9x.exe |
Associated with the Realtime Monitor of
eTrust Antivirus/InoculateIT version 6 virus scanners from Computer
Associates. For NT/2K/XP users you may need a patch if seeing high CPU
useage - see
here |
| U |
InoTask |
InoTask.exe |
Scheduled scans and signature updates for
eTrust Antivirus/InoculateIT version 6 virus scanners from Computer
Associates. Leave enabled unless you manually update signatures or perform
routine scans. If enabled it can result in high CPU useage when performing
updates - see
here |
| ? |
insCOA5 |
insCOA5.exe |
?? |
| N |
InstallAurealDemos |
InstallAurealDemos.js |
Used to initialize the Aureal A3D demos InstallShield
wizard |
| U |
InstallBuddy |
Ibtna.exe |
InstallBuddy - automatically translates and installs your desktop
documents, such as Adobe PDF, HTML, Microsoft Word, Excel and PowerPoint
files, to your Palm organizer when you HotSync |
| ? |
InstallNAIProduct |
SETUP.EXE |
Could be related to Network
Associates Inc who own the McAfee VirusScan product amongst others. This was
found in a directory called "VSC". Could it be an installation that failed
and "SETUP.EXE" was left to run at startup as an error? |
| ? |
Install
Pending Files |
sifxinst.exe |
Uninstall program for
Lanovation's Prism
Deploy and Prism Pack adminstrators software deployement tools. For specific
information see
here. Is it required? |
| N |
InstantAccess |
INSTAN~1.EXE |
From TextBridge Pro 9.0 OCR scanner software. Available via
Start -> Programs |
| N |
Instant
Update Center |
reminder.exe |
From Broderbund's PrintMaster 10. It is an event reminder
(for calendar dates, etc). Delete from the startup using Startup Manager
program because it keeps re-checking itself when using MSCONFIG.
PrintMaster 11 uses filename PMremind.exe - it has to be unchecked in
startup in the same manner |
| U |
Instant Wireless
Configuration Utility |
WUSB11cfg.exe |
Utility used by the
LINKSYS
LINKSYS wireless USB Adapter (WUSB11) and indicates when a wireless access
connection is made by a screen colour change. Also used for configuration |
| X |
instit |
instit.bat |
Added as a result of the
OPASERV.H VIRUS! |
| ? |
InstUtlR.exe |
InstUtlR.exe |
?? |
| U |
Intel Active
Monitor |
imontray.exe |
Monitoring of fans, temperature, voltage, etc for Intel
motherboards. Only needed if you "overclock" |
| U |
Intel File
Transfer |
xfr.exe |
Part of Intel's LANDesk Management Suite 6 and the Common
Base Agent (CBA) - used for communicating between the core server and
managed clients |
| U |
Intellitype |
type32.exe |
For MS programmable keyboards. If you disable Intellitype
in Startup, any "Hot Keys" that are changed by the user to perform functions
other than default settings, defer back to their default settings unless you
have changed them |
| U |
Intel PDS |
pds.exe |
Intel Ping Discovery Service (PDS). Part of Intel's LANDesk
Management Suite 6 and the Common Base Agent (CBA) - used for communicating
between the core server and managed clients. Will start the dial-up if
installed and enabled |
| U |
Intel Product Number Utility |
IntelProcNumUtility.exe |
The Intel Processor Serial Number Control Utility allows
you to enable and disable the processor serial number capability of your
Intel PIII processor. You can find more information
here |
| U |
Intel
PROSet Tray Icon |
promon.exe |
System Tray icon for Intel PRO series ethernet adapters.
Only needed if you need to access the diagnostic features |
| ? |
Intense
Registry Service |
IntEdReg.exe /CHECK |
Intense
Educational Ltd - Language Office Software. Is it
required? |
| Y |
InterCheck
Monitor |
Icmon.exe |
Part of
Sophos
ant-virus sofware |
| X |
Interdll |
Interdll.exe |
Added as a result of the
DELF family of VIRUSES! |
| N |
internat.exe
(1) |
internat.exe |
Language selection icon in system tray |
| X |
Internat.exe
(2) |
internat.exe |
Added as a result of the
NETSNAKE VIRUS! Note - the real internat.exe resides in %windir%\system\
(where %windir% is the Windows directory - C:\Windows or C:\Winnt) and has a
"?" icon wheras this version resides in %windir% and has a ZIP icon |
| X |
Internet.exe |
Internet.exe |
Added as a result of the
MAGICCALL VIRUS! |
| U |
Internet Answering Machine |
IAMNET~1.EXE |
From
Callwave. It offers a free utility to monitor your incoming phonecalls
if you only have a single telephone line for internet access |
| U |
Internet
History Eraser |
HERASER.exe |
Internet History Eraser - deletes your browsing tracks |
| X |
Internet Loader1 |
MSInstall61.exe |
Added as a result of the
KWBOT.B VIRUS! |
| U |
Internet
Optimizer |
optimize.exe |
Internet connection optimizer. Leave this enabled if you
find it improves your connection |
| Y |
Internet
Sharing Server |
iss_srvr.exe |
Intel AnyPoint internet sharing software |
| N |
Internet Sweeper |
Sweeper.exe |
Internet
Sweeper - removes unnecessart left over files after browsing the
internet |
| U |
Internet Timer |
ITIMER.exe |
Shareware dial-up connection call cost calculator from
Ratsoft |
| X |
InternetWasherPro |
iw.exe |
Internet Washer manages temporary browser files, cookies, etc - a
'trial' Internet Washer Pro seems to have been widely stealth-installed
around March 2003 |
| N |
InterTrust
Quick Start |
it_cpq~1.exe |
InterTrust
offers something known as Digital Rights Management to control legal
software download and other E-commerce related business |
| X |
InterU |
WINDRV.EXE |
Added as a result of the
IRCINTER.A VIRUS! |
| N |
Intervideo Win Cinema Manager
or
Intervideo WinCinema Manager |
WinCinemaMgr.exe |
WinCinema Manager is needed when using the WinDVD Remote Control for
WinDVD from Intervideo. Available via Start -> Programs |
| N |
Intervideo
WinScheduler |
WinScheduler.exe |
WinScheduler is installed with WinDVD Remote Control for WinDVD from
Intervideo. If you want to schedule recordings from your TV tuner card, you
will need it. Available via Start -> Programs |
| U |
InterWARN |
interwarn.exe |
InterWARN
by Storm Alert Inc. Provides customized, automated access to critical
weather and civil emergency information from the US National Weather
Service. Required if audio and screen crawler alerts are desired. Also
available via Start -> Programs |
| N |
Introducing Media Manager |
SPLASHA.EXE |
MS Media Manager tour. Not required |
| N |
Introduction-Registration |
?? |
For Compaq PC's. Should only run first time, PC
Introduction & Compaq registration |
| X |
IntruderAlert |
ia99.exe |
Intruder Alert '99 from Bonzi - spyware |
| X |
Ioadqm |
Media Player.exe |
Added as a result of the
HAWAWI VIRUS! |
| U |
iolo Task Agent |
Task_Agent.exe |
iOlo
System Mechanic
Task Agent. Scheduled maintenance |
| U |
Iomega
Automatic Backup
or
Iomega Automatic Backup 1.0.1 |
ibackup.exe |
Iomega Automatic Backup - automatic backups for use with Iomega portable
HDD |
| N |
Iomega
Backup Scheduler |
dtiom98.exe |
Used by Iomega drives. Details of its purpose can be found
here. Available via Start -> Programs |
| N |
Iomega Disk
Icons
or
Iomega Drive Icons |
IMGICON.EXE |
Used by Iomega drives. Details of its purpose can be found
here. Available via Start -> Programs |
| ? |
Iomega QuickSync |
Quicksync.exe |
?? |
| N |
Iomega
Startup Options |
IMGSTART.EXE |
Used by Iomega drives. Details of its purpose can be found
here. Available via Start -> Programs |
| N |
IomegaWare |
COMMANDER.EXE |
Used by Iomega drives. Details of its purpose can be found
here. Available via Start -> Programs |
| N |
Iomega Watch |
IOWATCH.EXE |
Used by Iomega drives. Available via Start -> Programs |
| U |
Iomon98.exe |
Iomon98.exe |
PC-Cillin 98 real time virus check. Can cause floppy disk
accesses to hang |
| N |
iPalm |
mon.exe |
Installed with a Panasonic
iPalm digital camera. Used to uploaded photos from the camera. If your
camera is not connected (via USB port) you do not need this program loaded |
| X |
IPInSightLAN 01 |
ipclient.exe |
Installed with Verizon DSL accounts. IP Insight is a
Quality of Service monitor and diagnostic tool that isn't required - see
here for
more information. This one constantly "phones home" and wastes resource -
hence the "X" status |
| N |
IPInSightMonitor 01 |
ipmon32.exe |
Installed with Verizon DSL accounts. IP Insight is a
Quality of Service monitor and diagnostic tool that isn't required - see
here for
more information |
| Y |
IPinst |
N/A |
For Gilat Communications internet satellite systems. Gilat
rescue (Satellite system restore). Required if you have this system. Can
cause a BSOD (blue screen of death) if left out |
| X |
ipmon.exe |
ipmon.exe |
Added as a result of the
RECERV VIRUS! |
| Y |
IPSecMon |
IPSecMon.exe |
Microsoft L2TP/IPSec VPN Client for Win98/Me/NT. Secure technology for
making remote access virtual private network (VPN) connections across public
networks such as the Internet |
| Y |
IREIKE |
IreIKE.exe |
Microsoft L2TP/IPSec VPN Client for Win98/Me/NT. Secure technology for
making remote access virtual private network (VPN) connections across public
networks such as the Internet |
| ? |
iRis Active Monitor |
winmon32.exe |
?? |
| U |
IrMon |
IRMON.EXE |
System Tray access to infra-red devices. Not required
unless you use infra-red devices |
| ? |
IRPMonitor |
itcnmon.exe |
?? |
| N |
isdbdc |
isdbdc.exe |
For Compaq PC's. May install properties in dial-up
networking when you register with an ISP |
| ? |
ISLP2STA |
ISLP2STA.EXE |
Possibly a left over from Windows
Update for wireless NIC (maybe Linksys) drivers? |
| U |
iSpyNOW |
ispynow.exe |
iSpyNOW
- remote monitoring and surveillance software |
| X |
IST Service |
istsvc.exe |
ISTBar
foistware |
| U |
Itk |
Itk.exe |
In The Know - surveillance software that creates records of everything
people do on a computer, ie, spying or monitoring depending upon how you
call it |
| U |
iTouch |
iTouch.exe |
iTouch loads the iTouch configuration program for Logitech
keyboards. It’s needed if your keyboard has shortcut buttons and if you use
them. It’s also needed if your keyboard does not have the num lock, caps
lock, and scroll lock lights on it and you use the on-screen displays for
num lock, caps lock, and scroll lock |
| N |
ItsDeductiblePopUp |
ItsDeductible.exe |
ItsDeductible from Income Dynamics. Calculates your noncash donations
quickly and easily. This startup entry checks a registry entry for the next
'PopUp' date and if it is a past or current date displays a program related
tip |
| N |
Iusage |
netdet.exe |
Internet Usage Monitor - utility to calculate the cost and time on the
internet via dial-up |
| N |
IW Control
Center |
iwctrl.exe |
VOB InstantWrite enables you to use your CD-R, CD-RW and DVD-RAM drive
just like a hard disk or floppy disk. You can drag and drop files, create
new directories right on your CD-R, CD-RW or DVD-RAM. Supplied with some
Toshiba CD-writers. Maybe required if you use this feature on a regular
basis |
| X |
I-Worm.GiGu |
uGiG.eXe |
Added as a result of the
GINK VIRUS! |
| ? |
IZE |
N/A |
?? |

| |
Name/Startup Item |
Command |
Comments |
| N |
j2 Tray Menu |
HotTray.exe |
eFax Messenger Tray Menu system tray icon for eFax
Messenger Plus. Available via Start -> Programs. Disabling instructions
available here |
| X |
*JanisRuckenbrodII |
janis.com |
Added as a result of the
POPS VIRUS! |
| N |
JB |
Jiffybar.exe |
"Get Paid As You surf" application |
| Y |
JetAdmin Discovery Indicator |
HPJETDSC.EXE |
HP JetAdmin software for HP JetDirect Print Servers.
HPJETDSC.EXE is the file necessary for the JetAdmin Discovery Indicator
(paper airplane in the taskbar). It gets launched automatically through the
registry, and remains active to control the Discovery Indicator |
| N |
Jet Detection |
ADGJDet.exe |
Added with SoundBlaster Live! or Audigy soundcards for
headphone autodetection |
| ? |
JMWMG |
JMWMG.exe |
?? |
| U |
JogServ2
or
Jog Serve |
JogServ2.exe |
"Jog Dial" on a Sony Vaio laptop. The dial can select
various functions such as control audio. Needed if you use its features |
| U |
Jv16pt
Network Resident |
jv16pt_network.exe |
jv16 PowerTools' network resident program. Only needed if you are using
the program's network features |
| U |
jv16 PT
TempFileTool |
TempTool.exe |
jv16 PowerTools' temporary file remover |

| |
Name/Startup Item |
Command |
Comments |
| N |
K6CPU.EXE |
K6CPU.EXE |
Authenticates CPU as K6 in system properties |
| X |
kak |
kak.hta |
Added as a result of the
KAKWORM VIRUS! |
| U |
Kalibump |
Kalibump.exe |
Used with the now unsupported
Kali software for on-line
gaming. This is used to automatically bump up the priority of WinProxy to
GREATLY improve game speed when using a SOCKS proxy |
| N |
Kana Reminder |
Reminder.exe |
Kana
Reminder is a program which can be used to set a reminder to be
triggered at a specified time |
| U |
KavRuns |
Windll.exe |
Added as a result of the
TRYNOMA VIRUS! |
| N |
KAZAA |
kazaa.exe |
KAZAA is a file-sharing program which unfortunately being
ad-based includes "Cy-door" adware. Check
here for
information about "Cy-door" and
here
for a program that can remove it |
| X |
KAZAACuf |
9 |
Added as a result of the
KITRO.D (or
ARGEN.A) VIRUS! |
| N |
kazaalite |
kazaalite.exe |
Kazaalite is a file sharing client - not to be confused with the
original Kazaa program. Unlike the original, this one does not contain any
advertising or tracking mechanisms |
| U |
KBD |
KBD.EXE |
Multimedia keyboard manager. Required if you use the
multimedia keys |
| U |
KBD MediaCenter |
MEDIACTR.EXE |
Multimedia keyboard manager. Required if you use the
multimedia keys |
| X |
Keenvalue |
Keenvalue.exe |
Keenvalue spyware - see
here |
| U |
KE9801 |
DriBat32.exe |
KE-9801 multimedia keyboard - required if you use the multimedia keys |
| ? |
Kemet |
kemet.exe |
?? |
| X |
kernel32
(1) |
kern32.exe |
Added as a result of the
BADTRANS.A VIRUS! |
| X |
Kernel32
(2) |
Kernel32.exe |
Added as a result of a number of VIRUSES - such as
BABYLONIA,
KERNEL and
HOOKER |
| X |
kernel32
(3) |
kernel.dli |
Added as a result of the
NETDEVIL.B VIRUS! |
| X |
Kernel32
(4) |
Kernel.dll |
Added as a result of the
REDLOF.M VIRUS! |
| N |
kernelfaultcheck |
dumprep 0 -k
dumprep 0 -u |
Used in connection with memory dumps - you can disable
these by - right clicking on My Computer, selecting Properties and then the
Advanced tab. Click on the Settings button in 'Startup and Recovery'. In the
bottom pane - under 'Write debugging information' - click on the down arrow
and then select 'None' - OK your way out |
| X |
Kernell32 |
Kernell.dll |
Added as a result of the
DESTINY VIRUS! |
| X |
Kernel Loader |
ntkrnl.exe |
Added as a result of the
CERVIVEC.A VIRUS! |
| U |
Keyboard Manager |
MMKeybd.exe |
Multimedia keyboard manager. Required if you use the
additional keys. Can also be listed as
MULTIMEDIA KEYBOARD |
| U |
KeyMaestro |
kmaestro.exe |
Multimedia keyboard manager. Required if you use the
multimedia keys |
| ? |
keymap |
keymap.exe |
?? |
| N |
Key Text |
KeyText.exe |
Key Text 2000
from MJMSoft Design - utility to automate repetitive keyboard tasks.
Available via Start -> Programs |
| U |
KeyWallet |
KWallet.exe |
"KeyWallet
is a useful and convenient desktop utility that spares you the trouble of
filling in your logins, passwords and other personal data manually" |
| N |
Kinberlink |
Kinberlink.exe |
Kinberlink network messaging. Available via Start -> Programs |
| U |
KK Loader |
loadkk.exe |
KeyKey XP
Professional from KeyKey.com. "Monitor Instant Messages, Chats, Emails,
Web Site URLs, Passwords, Computer Programs, Start Up and Shut Down time and
much more completely undetected to the user." |
| U |
KM9801U |
MMHotKey.exe |
Multimedia key handling for the relevant type of
Turbo-Media keyboard. Shortcut available |
| U |
kmw_run.exe |
kmw_run.exe |
Kensington MouseWorks - mouse/trackball software. Not
required unles you use any special features |
| U |
kmw_show.exe |
kmw_show.exe |
Kensington MouseWorks - mouse/trackball software. Not
required unles you use any special features |
| N |
Kodak Batch
Transfer |
pezdow1.exe |
Part of "Kodak Picture Easy" software for digital cameras.
Includes the display of an icon in the System Tray to quickly transfer
photos to a PC |
| N |
Kodak Picture Transfer
Software |
pts.exe |
Looks for Kodak camera connection and media insertion.
Available via Start -> Programs |
| N |
Kodak
Software Updater |
backweb*****.exe |
Software updater for
Kodak Easyshare digital cameras |
| N |
Konni
Symbol Autostart |
KonniSymbol.exe |
Gives configuration access to
RagTime Solo
professional business publishing software. RagTime Solo is the private user
version of RagTime 5 |

| |
Name/Startup Item |
Command |
Comments |
| U |
LapLink scheduler |
Llsched.exe |
Utility that automatically performs file transfers as
unattended background operations |
| Y |
LASTinst |
N/A |
For Gilat Communications internet satellite systems. Gilat
rescue (Satellite system restore). Required if you have this system. Can
cause a BSOD (blue screen of death) if left out |
| ? |
Later |
later.exe |
?? |
| U |
LaunchAp |
LaunchAp.exe |
Part of
Acer Launch Manager - programmable keys on such laptops as the
TravelMate 610 |
| U |
Launchboard |
lnchbrd.exe |
"LaunchBoard software from Darwin turns your keyboard into
a remote control for the Internet and your computer! With LaunchBoard 2.0,
you can customize up to 38 keys on your PC keyboard to instantly launch Web
Sites, start applications, perform custom macros, handle Windows shortcuts,
store passwords, and perform loads of other customizable functions" |
| X |
Launcher
(1) |
launcher.exe |
Spyware component related to DownloadWare and found in
Program Files\KFH |
| N |
Launcher
(2) |
relaunch.exe |
Audio Applications Launcher for the Philips
Rythmiic Edge soundcard (the Philips Rhythmic Edge is the same as the
Thunderbird PCI soundcard - see TBtray). Available via Start -> Programs |
| U |
Lavasoft Adwatch |
Ad-watch.exe |
Part of Lavasoft
Ad-aware
Plus - realtime spyware-monitor watching your memory and registry for
spyware that tries to install or change your system |
| Y |
laxmsp32.exe |
laxmsp32.exe |
Lexmark Scan and Copy Control Program for the X63 (and
maybe others) printer/scanner. Required for the scanner to work |
| N |
LDM |
backweb-8876480.exe
ldmconf.exe |
Installed with the software for Logitech products.
Automatically checks for software upgrades AND new products, services and
special offerings from Logitech. Also listed under Logitech Desktop
Messenger |
| U |
LED TRAY |
LEDTRAY.EXE |
Installs a USB compact flash card reader or drive on
start-up. The device is distributed by Microtech and is made by a company
called SnapShot. Required if you want the reader to work |
| N |
LeechGet |
LeechGet.exe |
LeechGet download
manager |
| X |
LetsSearch |
LetsSearch.exe |
BrowserAid/BrowserPal foistware variant |
| N |
LexmarkPrinTray |
printray.exe |
Lexmark Printer icon in the System Tray for quick access.
Not required - uncheck via Printer configuration rather than MSCONFIG. Can
also be listed as PrinTray |
| Y |
Lexmark Xxx Button Manager |
AcBtnMgr_Xxx.exe |
Associated with the Lexmark Xxx (where "xx" is the model)
all-in-one printer/scanner/copier. Required for correct operation |
| Y |
Lexmark Xxx Button Monitor |
ACMonitor_Xxx.exe |
Associated with the Lexmark Xxx (where "xx" is the model)
all-in-one printer/scanner/copier. Required for correct operation |
| ? |
Lexmark X74-X75 |
lxbbbmgr.exe |
Button manager/monitor for these
Lexmark printer models?. Is it required? |
| N |
?? |
lexpps.exe |
For Lexmark printers. From Lexmark: "This enables
bi-directional printing over a peer to peer network. If the printer is
connected directly to your PC, the file is not used, (or should not be used)
at all". It is known that firewalls can however alert you to "lexpps.exe"
requesting server privileges |
| U |
LexStart |
lexstart.exe |
Lexmark printer software may add Lexstart.exe in the
startup folder to handle print commands that you send to the printer.
Sometimes required for the printer to work correctly - not in the case of a
Lexmark Z42 for instance |
| N |
LicCrtl |
runservice.exe |
eLicense,
licensing system incorporated with some software and games |
| N |
LifeScape Media Detector |
PicasaMediaDetector.exe |
Media detector for
Picasa's automatic
photo organizer |
| X |
li-multi**** |
li-multi****.exe |
Adult web-dialler - **** is random |
| N |
Line
Speed Meter V3.0 |
LineSpeedMeter.exe |
LineSpeedMeter - detect the download and upload speed of your internet
connection |
| X |
li-speed**** |
dlres.exe |
Adult web-dialler - **** is random |
| X |
li-thund**** |
li-thund****.exe |
Adult web-dialler - **** is random |
| N |
LIU |
LIU.exe |
Logitech Internet Update. Used to update drivers/software
for Logitech's Wingman, QuickCam, etc devices. Reports claim it doesn't work
very well and you can manually update the files anyway |
| N |
LiveMonitor |
LMonitor.exe |
MSI Live Update2 - auto-detects and suggests the latest
BIOS/Driver/Utilities information |
| N |
Live Menu |
Dllcmd32.exe |
eFax Send button for eFax Messenger Plus. Available via
Start -> Programs Disabling instructions available
here |
| N |
LiveNote |
Livenote.exe |
Asus graphics card driver live update feature |
| ? |
LLMODCL2 |
rundll.exe setupx.dll, InstallHinfSection
..\LLMODCL2.INF |
?? |
| ? |
lmpdpsrv |
lmpdpsrv.exe |
Related to a Lexmark printer/scanner.
Printer sharing server? Is it required? |
| N |
LMSTATUS |
LMSTATUS.EXE |
Lexmark Status Monitor. Checks the current status of
Lexmark printers (and other devices?) |
| N |
load=
(1) |
adw30.exe |
After Dark for Windows - screen saver program. Popular
before screen savers were integrated into Win95 |
| U |
load=
(2) |
asistat.exe |
Status monitor for an NEC SuperScript printer |
| ? |
load=
(3) |
cfgsys32.exe |
?? |
| U |
load=
(4) |
esspk.exe |
Speakerphone capability through a soundcard for an
ESS modem |
| Y |
load=
(5) |
hotkey.exe |
Solo 5300 display driver for Win2K on some Gateway laptops |
| N |
load=
(6) |
HPWHRC.EXE |
Loads the Status Window software for the HP Laserjet
printers |
| ? |
load=
(7) |
WPSLOAD.EXE |
Related to a Canon BJ C series
printer? |
| N |
load=
(8) |
vi_grm.exe |
Monitor drivers for Trio2x/3x based video cards - displays
control panel for quick access to display settings |
| ? |
load=
(9) |
WINOSCFG.EXE |
Could it be something to do with
configuring Windows on a new PC from an OEM supplier? |
| Y |
load=
(10) |
wpshrc.exe |
Required to prevent configuration errors on a Compaq
LBP-660 parallel port laser printer (and maybe others) |
| Y |
LoadBlackD |
blackd.exe |
This is the "intrusion detection system" of the
BlackICE PC Protection (was Defender) firewall which loads independently
of the "user interface" (BlackICE Utility) |
| ? |
LoadBtnHnd |
BtnHnd.exe |
Fujitsu LifeBook related |
| X |
LoadDBackUp |
| |